Edit tour

Windows Analysis Report
http://142.202.190.19

Overview

General Information

Sample URL:	http://142.202.190.19
Analysis ID:	1644428
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Uses nslookup.exe to query domains

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Sample execution stops while process was sleeping (likely an evasion)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,4930913577362111281,6245488040207069887,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://142.202.190.19" MD5: E81F54E6C1129887AEA47E7D092680BF)

cmd.exe (PID: 1988 cmdline: "C:\Windows\system32\cmd.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1360 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4328 cmdline: nslookup 142.202.190.19 MD5: F2E3950C1023ACF80765C918791999C0)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion
• HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://1337.com

Avira URL Cloud: Label: malware

Source: http://142.202.190.19/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.72:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49851 version: TLS 1.2

Networking

Uses nslookup.exe to query domains

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\nslookup.exe nslookup 142.202.190.19
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\nslookup.exe nslookup 142.202.190.19			Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 142.202.190.19
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=h&oit=1&cp=1&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=htt&oit=1&cp=3&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http&oit=1&cp=4&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https&oit=1&cp=5&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=vmOcs6L1rKAo4R-hNFub5JvW7Hx6ApzPrs0KmTTmi6wBqtw5FjslvzGe4tOQV_paSS6g-ObLb_R5--hfwTZW15DMnFz3NLi9hMQrQTA4-MsTLV68_MMyQOVTdK7NPlvpNxycYbY_Va5QlXgw2gfugr-bS5rKIbIsYLYx85HSQTzkpW11wYoexqgIv_0DSr1RCQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A&oit=4&cp=6&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=vmOcs6L1rKAo4R-hNFub5JvW7Hx6ApzPrs0KmTTmi6wBqtw5FjslvzGe4tOQV_paSS6g-ObLb_R5--hfwTZW15DMnFz3NLi9hMQrQTA4-MsTLV68_MMyQOVTdK7NPlvpNxycYbY_Va5QlXgw2gfugr-bS5rKIbIsYLYx85HSQTzkpW11wYoexqgIv_0DSr1RCQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F&oit=4&cp=8&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=vmOcs6L1rKAo4R-hNFub5JvW7Hx6ApzPrs0KmTTmi6wBqtw5FjslvzGe4tOQV_paSS6g-ObLb_R5--hfwTZW15DMnFz3NLi9hMQrQTA4-MsTLV68_MMyQOVTdK7NPlvpNxycYbY_Va5QlXgw2gfugr-bS5rKIbIsYLYx85HSQTzkpW11wYoexqgIv_0DSr1RCQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F1&oit=4&cp=9&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F14&oit=4&cp=10&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142&oit=4&cp=11&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.&oit=4&cp=12&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.20&oit=3&cp=14&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202&oit=3&cp=15&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.&oit=3&cp=16&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.19&oit=3&cp=18&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190&oit=3&cp=19&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.&oit=3&cp=20&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.1&oit=3&cp=21&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.19&oit=3&cp=22&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 142.202.190.19Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 142.202.190.19Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://142.202.190.19/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_58.1.dr	String found in binary or memory: ["https",["https","https //www.youtube.com music","https //www.microsoft.com /ink","https //p4.tempus unlimited.org","https //health professional licensing.mass.gov/upload","https://microsoft.com/link","https://www.google.com","https://www.epicgames.com/activate","https://www.youtube.com/","https://www.facebook.com/"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1300,601,552,551,550,404,403,402,401,400],"google:suggestsubtypes":[[512],[512],[512,433],[512],[512],[44],[44],[44],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":1300}] equals www.facebook.com (Facebook)
Source: chromecache_58.1.dr	String found in binary or memory: ["https",["https","https //www.youtube.com music","https //www.microsoft.com /ink","https //p4.tempus unlimited.org","https //health professional licensing.mass.gov/upload","https://microsoft.com/link","https://www.google.com","https://www.epicgames.com/activate","https://www.youtube.com/","https://www.facebook.com/"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1300,601,552,551,550,404,403,402,401,400],"google:suggestsubtypes":[[512],[512],[512,433],[512],[512],[44],[44],[44],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":1300}] equals www.youtube.com (Youtube)
Source: chromecache_68.1.dr	String found in binary or memory: ["https://",["https //www.youtube.com music","https //chatgpt.com login","https //www.microsoft.com /ink","https //www.facebook.com login","https //www","https //discord.com login","https //www.google.com maps","https //p4.tempus unlimited.org","https://microsoft.com/link","https://www.epicgames.com/activate"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,555,554,553,552,551,550,401,400],"google:suggestsubtypes":[[512,433],[512,650,433],[512,433],[512,650,433,131],[512,650,433,131],[512,650,433,131],[512,650,433],[512],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}] equals www.facebook.com (Facebook)
Source: chromecache_68.1.dr	String found in binary or memory: ["https://",["https //www.youtube.com music","https //chatgpt.com login","https //www.microsoft.com /ink","https //www.facebook.com login","https //www","https //discord.com login","https //www.google.com maps","https //p4.tempus unlimited.org","https://microsoft.com/link","https://www.epicgames.com/activate"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,555,554,553,552,551,550,401,400],"google:suggestsubtypes":[[512,433],[512,650,433],[512,433],[512,650,433,131],[512,650,433,131],[512,650,433,131],[512,650,433],[512],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}] equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: 1.1.1.1.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 19.190.202.142.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons2.gvt2.com

Source: chromecache_57.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_63.1.dr	String found in binary or memory: https://1337.com
Source: chromecache_65.1.dr	String found in binary or memory: https://142.202.190.
Source: chromecache_62.1.dr	String found in binary or memory: https://142.202.190.1
Source: chromecache_60.1.dr	String found in binary or memory: https://142.202.190.19
Source: chromecache_67.1.dr	String found in binary or memory: https://1420.tamin.ir
Source: chromecache_63.1.dr	String found in binary or memory: https://192.com
Source: chromecache_69.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_69.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_69.1.dr, chromecache_57.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_66.1.dr, chromecache_64.1.dr	String found in binary or memory: https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate
Source: chromecache_69.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_69.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_69.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_57.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_57.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_57.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_57.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_57.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_69.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_69.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_69.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_69.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_57.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_57.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_57.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941

Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.72:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.17:49851 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5132_1780690206

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5132_1780690206

Jump to behavior

Source: classification engine

Classification label: mal52.troj.win@35/35@43/4

Source: C:\Windows\System32\conhost.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,4930913577362111281,6245488040207069887,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://142.202.190.19"
Source: unknown	Process created: C:\Windows\System32\cmd.exe "C:\Windows\system32\cmd.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\nslookup.exe nslookup 142.202.190.19
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,4930913577362111281,6245488040207069887,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\nslookup.exe nslookup 142.202.190.19	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Section loaded: winbrand.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\nslookup.exe nslookup 142.202.190.19

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Process Injection	LSASS Memory	1 System Network Configuration Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://142.202.190.19	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://1420.tamin.ir	0%	Avira URL Cloud	safe
https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate	0%	Avira URL Cloud	safe
https://1337.com	100%	Avira URL Cloud	malware
https://142.202.190.19	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
plus.l.google.com	142.250.80.78	true	false	high
play.google.com	142.250.64.110	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.116.94	true	false	high
www.google.com	142.250.65.164	true	false	high
beacons2.gvt2.com	142.250.69.131	true	false	high
beacons.gvt2.com	142.250.114.94	true	false	high
beacons6.gvt2.com	142.250.81.227	true	false	high
1.1.1.1.in-addr.arpa	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
19.190.202.142.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=htt&oit=1&cp=3&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.20&oit=3&cp=14&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.19&oit=3&cp=18&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http&oit=1&cp=4&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.19&oit=3&cp=22&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false	high
https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700200v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700500v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule224902v2s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120651v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120402v21s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120642v0s19.xml	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://1337.com	chromecache_63.1.dr	false	Avira URL Cloud: malware	unknown
https://1420.tamin.ir	chromecache_67.1.dr	false	Avira URL Cloud: safe	unknown
https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate	chromecache_66.1.dr, chromecache_64.1.dr	false	Avira URL Cloud: safe	unknown
https://plus.google.com	chromecache_69.1.dr	false		high
https://142.202.190.19	chromecache_60.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.65.164	www.google.com	United States		15169	GOOGLEUS	false
142.202.190.19	unknown	Reserved		398019	DYNUUS	true

Private

IP
192.168.2.17
192.168.2.15

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644428
Start date and time:	2025-03-20 15:04:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://142.202.190.19
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.troj.win@35/35@43/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, consent.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.206, 142.250.65.163, 172.253.62.84, 142.250.65.238, 142.250.64.110, 142.251.32.110, 142.250.176.195, 142.251.41.10, 142.250.64.106, 142.250.81.234, 142.250.65.234, 142.251.40.170, 142.250.176.202, 142.251.40.202, 142.251.32.106, 142.251.40.234, 142.250.64.74, 142.250.72.106, 142.250.65.170, 142.251.40.138, 142.251.40.106, 142.250.65.202, 142.251.35.170, 142.251.40.238, 142.251.40.227, 172.217.165.142, 23.203.176.221, 142.250.80.78, 4.175.87.197, 184.31.69.3, 184.86.251.25, 20.189.173.24, 204.79.197.222, 13.107.226.254, 142.250.81.227
Excluded domains from analysis (whitelisted): clients1.google.com, www.bing.com, fp.msedge.net, fs.microsoft.com, l-ring.msedge.net, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, t-ring-fallback-s2.msedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, otelrules.svc.static.microsoft, update.googleapis.com, crl3.digicert.com, clients.l.google.com, www.gstatic.com, browser.pipe.aria.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://142.202.190.19

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2412)
Category:	downloaded
Size (bytes):	173841
Entropy (8bit):	5.556498261539637
Encrypted:	false
SSDEEP:	3072:tsrIQAE5yHuPntYTuZgQvj8REXBK28hkx71jobaI0fgfp5UYgMFXhheBW0tmHPx3:tsrIxE5yHuPntKuZgQvjuEXBK28hkx7E
MD5:	0FAA3459456441965DB64B42BBA92BFF
SHA1:	843E3BFCAD0319F7219AB2A2607C4D08A6BD8B71
SHA-256:	DD13813C872690B3064BF7BA7F81A6425EED2D3D877BD73F2F77EC330CF7229F
SHA-512:	FF605D5AAFACB710EAE2F649AA76DE0614409F92D401D4F87B92F50E522F7FA38BE687EDD863C1693D885914DCB1E1B2FFA23C59CA56E0F0A6895053BEF6DC29
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.YoBm8xXuGOY.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvyqqDz_KyGXC5Q8ulwDStxO7ZuhQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Hi=function(a){if(4&a)return 2048&a?2048:4096&a?4096:0};_.Ii=class extends _.O{constructor(a){super(a)}};.}catch(e){_._DumpException(e)}.try{.var Ji,Mi,Ni,Pi,Qi,Ui;Ji=function(){return typeof BigInt==="function"};Mi=function(a){const b=a>>>0;_.Ki=b;_.Li=(a-b)/4294967296>>>0};Ni=function(a,b){b=~b;a?a=~a+1:b+=1;return[a,b]};_.Oi=function(a){if(a<0){Mi(-a);const [b,c]=Ni(_.Ki,_.Li);_.Ki=b>>>0;_.Li=c>>>0}else Mi(a)};Pi=function(a){a=String(a);return"0000000".slice(a.length)+a};.Qi=function(a,b){b>>>=0;a>>>=0;if(b<=2097151)var c=""+(4294967296b+a);else Ji()?c=""+(BigInt(b)<<BigInt(32)\|BigInt(a)):(c=(a>>>24\|b<<8)&16777215,b=b>>16&65535,a=(a&16777215)+c6777216+b6710656,c+=b8147497,b*=2,a>=1E7&&(c+=a/1E7>>>0,a%=1E7),c>=1E7&&(b+=c/1E7>>>0,c%=1E7),c=b+Pi(c)+Pi(a));return c};_.Ri=function(a,b){if(b&2147483648)if(Ji())a=""+(BigInt(b\|0)<<BigInt(32)\|BigInt(a>>>0));else{const [c,d]=Ni(a,b);a="-"+Qi(c,d)}else a=Qi(a,b);return a};._.Si

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (718)
Category:	downloaded
Size (bytes):	723
Entropy (8bit):	5.192907463191392
Encrypted:	false
SSDEEP:	12:u2N6VGJEwiUVjgtiNL4KDG4Av8Gq92BHslriFuOlg8VV8wulJZw4/ffffUwzyV:3JEJMjgwEKcfo2BHslgu0g8/tEcmfffy
MD5:	2916B48949AC994137BE1F815CA89120
SHA1:	D18DDA79CAE7C9C3FF329000023E5C8EE549DD1D
SHA-256:	59DD160A19771AF8087CFE5313992AD9714B04CB5B3F4536EF1432B69EBB728B
SHA-512:	F202125F8BAEBA302C7660739F28BB5C83DDC82981964ADB1F6EA93278615C720A6EAE681861B2B02A8D39E0549BE766952F4E91D8319B7F103AB446CA254D12
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https&oit=1&cp=5&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https",["https","https //www.youtube.com music","https //www.microsoft.com /ink","https //p4.tempus unlimited.org","https //health professional licensing.mass.gov/upload","https://microsoft.com/link","https://www.google.com","https://www.epicgames.com/activate","https://www.youtube.com/","https://www.facebook.com/"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1300,601,552,551,550,404,403,402,401,400],"google:suggestsubtypes":[[512],[512],[512,433],[512],[512],[44],[44],[44],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	4.87390997216254
Encrypted:	false
SSDEEP:	3:Vw26zVwGJ+X4wwBHsLpHbGWjLwWkzXFETH1u4:Vw26zVwet5BHsLRGAwWeXFEL13
MD5:	59993DC8373EDCAF24D4F953A34F0B44
SHA1:	8E1D56EA557881B0FB3236E7B00BD2CEFF632DE2
SHA-256:	F781EA1C6363E65E3C1F0CB0FB5C4348815540CD40F13DA6ECC0CD8C6B7C75D5
SHA-512:	00DABF3CFC64A6028FB804C9DAAE1861193D409633EE5835B2DEA69B961DBAA825B8366EF2D68A78CAEE433CFD89DF4376B8EA4870991220A071742B4D979CD9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.19&oit=3&cp=22&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://142.202.190.19",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	129806
Entropy (8bit):	5.43893056168787
Encrypted:	false
SSDEEP:	3072:M+CkijDGgp9arnN+yEf1gyZN9D6z6x0zW:jQjVParnN+yEf1gyZN9D46AW
MD5:	FDBCE5B878E48B523B59019E9C313233
SHA1:	4FBD6ADE8E34868DCAA23C3A909E853D82C01ED9
SHA-256:	4380A5EFD3C74D961A44E4AE9727536ADE3832E1077BA761F8A82A8A93E30A51
SHA-512:	EE9487756A83EF1BA45834F77D08B8046ACD6DAE6E8D850907C92F33187FB37D636ABFD02DFD5C9A17C97B5CFE4553FD6D34864B3DAE730B761BBDEFDB216470
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Fa gb_2d gb_Pe gb_rd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Qd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_ld gb_pd gb_Hd gb_md\"\u003e\u003cdiv class\u003d\"gb_xd gb_sd\"\u003e\u003cdiv class\u003d\"gb_Kc gb_R\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Kc gb_Nc gb_R\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	4.86175791323153
Encrypted:	false
SSDEEP:	3:Vw26zVwAEHwwBHsLpHbGWjLwWkzXFETH1u4:Vw26zVwj5BHsLRGAwWeXFEL13
MD5:	F686C0230978813B2574C7E3F0FDD6A7
SHA1:	3620E99F0F71454444249ECBF7ED14083FC8CCF4
SHA-256:	6A68FC678BB15BD09E4D6A08AEEAD6C09B30B611B1DB7827EECFB240F85BC7E8
SHA-512:	41D3AC5CA1AA2B0F11530DA553287CE2BB9EAD536BF5F21763A83D76DDACBA3A38515E878158B0AF30A02B906FE6B5A9283EA082F14437AA9A3050A4D5FC713F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.1&oit=3&cp=21&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://142.202.190.1",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	downloaded
Size (bytes):	652
Entropy (8bit):	5.1042101749711755
Encrypted:	false
SSDEEP:	12:u2st/OdOi8IcnopXipOSoABHslriFut/gFFVVDwuSAoZw4/fffffffswzpO:K4cidyAEBHslgudgFF/k5amfffffffdQ
MD5:	09CB11DF16A34488899AE00B416774A4
SHA1:	72C863AF4CEFEA2164B4AAF835A7AFF0FE8BB130
SHA-256:	2B801B0F3139731647C83C8E8B477C649F858D589895D432116119673E61680E
SHA-512:	53C30725D7F64D986FFD7B9AA5203FC938A081740BAC405B67D867AC4ACD6F2E9D5F8328F63BE4B81782F8CA6EA3B333E9714C4C015DF98E15A674AFA6217C22
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F1&oit=4&cp=9&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://1",["https //192.168.l.1","https //192.168.l.254","https //10.0.0.0.1","https //1v1.lol unblocked","https //192 l.168.0.1","https //1password.com login","https //192.168.l.0","https //192 l.168.1.1","https://192.com","https://1337.com"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1202,601,600,554,553,552,551,550,401,400],"google:suggestsubtypes":[[512,433,131],[512],[512],[512],[512,433],[512],[512],[512],[44,10],[44,10]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":1201}]

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	162
Entropy (8bit):	4.356411127608949
Encrypted:	false
SSDEEP:	3:cUAFrC4JDEAMygLIK4FMpJr+i1Yl02EpA6IK4l4EOFKxiMI4K:cZF+ADhMZRQIJrvulEpAVKKyn9
MD5:	FF3BA62CC40CCE99AD6CCA58D824D076
SHA1:	0836F1BBA0D5B223E9A75098CE9D47351FD7D545
SHA-256:	5B339BC302CF8670796020616D475B9EE51F40B5E68125477F8AC6C78B52CAEC
SHA-512:	35CB8E1C7B5C29A4238CE740B2442BED3A0AE7A21011AB2BF58CFBAA1CC682D48D51564AA8B6E75237270DCF5593B54FCCF9CF3347A27B855736530D1128A8B8
Malicious:	false
Reputation:	low
URL:	http://142.202.190.19/favicon.ico
Preview:	Please use the pollinate client. 'sudo apt-get install pollinate' or download from: https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.858398999625342
Encrypted:	false
SSDEEP:	3:Vw26zVw74JHwwBHsLpHbGWjLwWkzXFETH1u4:Vw26zVwYH5BHsLRGAwWeXFEL13
MD5:	8B8DEBD5AF42438427BBA874824F1D4F
SHA1:	C8CE8193483F1C0D9AE68D5EB114DD9C6C4A51AC
SHA-256:	8B24F6889C187EC6C43D0E8DE934D2E40569986C6EAF3894C4E8EFBF30646827
SHA-512:	DEBCC39D93FE3F6B4A66EB73FC3A14D1A2E1852C6E9E396E9B3BC2FC2E331608B5234FE8EA343EA58F28D177048C00E0D71174BEBB09EA157CCB1EECE7578ED5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.&oit=3&cp=20&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://142.202.190.",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	162
Entropy (8bit):	4.356411127608949
Encrypted:	false
SSDEEP:	3:cUAFrC4JDEAMygLIK4FMpJr+i1Yl02EpA6IK4l4EOFKxiMI4K:cZF+ADhMZRQIJrvulEpAVKKyn9
MD5:	FF3BA62CC40CCE99AD6CCA58D824D076
SHA1:	0836F1BBA0D5B223E9A75098CE9D47351FD7D545
SHA-256:	5B339BC302CF8670796020616D475B9EE51F40B5E68125477F8AC6C78B52CAEC
SHA-512:	35CB8E1C7B5C29A4238CE740B2442BED3A0AE7A21011AB2BF58CFBAA1CC682D48D51564AA8B6E75237270DCF5593B54FCCF9CF3347A27B855736530D1128A8B8
Malicious:	false
Reputation:	low
URL:	http://142.202.190.19/
Preview:	Please use the pollinate client. 'sudo apt-get install pollinate' or download from: https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (669)
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	5.087132014526397
Encrypted:	false
SSDEEP:	12:u2Q/e6Chp0FGwNCLDc1BHsgriFuZsnFVVSJLwu7WWWWWYFWsJZw4/ffffffffUw+:96uzKCLDgBHsgguZsnF/5iWWWWWQWscB
MD5:	79CA51A9911B52CB4E4288D546854597
SHA1:	599CAB95D1C0E975DDF31ED11F8656DD21BE376E
SHA-256:	90778057CE71B7556AC9EA5E78505F3F099F6B9C780288D8F406E6CAC55D580D
SHA-512:	4BA5864126D4FF8D8A11C3144CF396D8DADEED74CB95431C63BB4947A3344BEF8D322FDB74F835C082317BB9A511219F159AC2B3D44FB4ABA3C6341BF6031B33
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142&oit=4&cp=11&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://142",["https //142","https 1420 tamin ir cases","https 1420","https 192.168 l 142","https xkcd com 1425","https bersamabumn com 142","https //www.cetis 142 edu.mx/aspirantes/proceso","https hu unibet 142 com","https ify ac 142r","https://1420.tamin.ir"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"pre":0,"tlw":false},"google:suggestrelevance":[601,600,556,555,554,553,552,551,550,400],"google:suggestsubtypes":[[22,30],[22,30],[22,30],[22,30],[22,30],[22,30],[22,30,10],[22,30],[22,30],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (752)
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	5.167210074125613
Encrypted:	false
SSDEEP:	12:u206/VGJEwB5piUhpYRwBXYpjZEVjgtsDeK42BHslriFuZsPFVVDwuK33+JZw4/g:uJE45E2SRcYf8jgeSd2BHslguZsPF/kZ
MD5:	82BC9D2654F01BC32F2277D5BC93B919
SHA1:	AEB9919652A08247501C52BA08170AB00F6ACA67
SHA-256:	646164F69CA1FDBF4138D0302E9A00A074B8ED6F452CBA94E974A0A50A599E24
SHA-512:	A6149A4EF3715FF3A6E4832F2C951821728180A1BA078A64C17C4DF9EDCA63447B405040B7BDCE57D9B7AF8BE64CF5123D6E61A3FBB3146B5D6366AE0331B907
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F&oit=4&cp=8&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://",["https //www.youtube.com music","https //chatgpt.com login","https //www.microsoft.com /ink","https //www.facebook.com login","https //www","https //discord.com login","https //www.google.com maps","https //p4.tempus unlimited.org","https://microsoft.com/link","https://www.epicgames.com/activate"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,555,554,553,552,551,550,401,400],"google:suggestsubtypes":[[512,433],[512,650,433],[512,433],[512,650,433,131],[512,650,433,131],[512,650,433,131],[512,650,433],[512],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1617)
Category:	downloaded
Size (bytes):	117345
Entropy (8bit):	5.491583002528666
Encrypted:	false
SSDEEP:	3072:3uyv2fVbFypYIOKEQylM3s5dGgza/EEQJE9:3uyIVbFgYVxdgJQJE9
MD5:	8F0B2CF806F323303D90290C04C66286
SHA1:	9C671B5E1F625BFA6894818C4A7BA6950F300DF4
SHA-256:	F0520A5239189BB680C613427E7760E8DD41D1DF2D60EF699F8A74BDFE3AF750
SHA-512:	355BFFF7963C903BB1E5D9E950570BAB9541B9D426C5725EF298895420E92D3E48A36340A70F177D204DDC1DBF92CB7AE661501D2E876363988B45C3C7D15683
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.24R2mrw_td8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9vR1rNwOjC3PXOxUlyKiCwNBv2Fg/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var aa,ea,la,pa,za,Ea,Fa;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.la=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.na=la(this);pa=function(a,b){if(b)a:{var c=_.na;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.pa("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.349865760247148
Encrypted:	false
SSDEEP:	96:mtOTUb1db1ClNY5co7shdiUYVqig7O7aZCUgpgXEt94k+g8IHh8u928DoCLQ:mtOT8TfL1Vqig7mIg8IB8u88DA
MD5:	70A8F21806E7F1B739937970EBE49A0C
SHA1:	6BE9EEBCE438DE91FEB20E6A5458774B327AA9B4
SHA-256:	C8B531CFD6E9BE13762E289820F67406331303CD5111A885DE959BF83DD0F5AC
SHA-512:	3C055567D0ED53BD30773C0BE475DC7499E44AFB92FB05021029D9A0C1299A470CDD3A8CACCCF798D5345ED627C5836E9DF5955A120FE56BA3624EC76A673270
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.NMINDki6kLA.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvYlftuY78adXLhp87lmRFFGNIY2Q"
Preview:	.gb_Q{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ka{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_La{fill:#f9ab00}.gb_H .gb_La{fill:#fdd663}.gb_Ma>.gb_La{fill:#d93025}.gb_H .gb_Ma>.gb_La{fill:#f28b82}.gb_Ma>.gb_Na{fill:white}.gb_Na,.gb_H .gb_Ma>.gb_Na{fill:#202124}.gb_Oa{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (910)
Category:	downloaded
Size (bytes):	915
Entropy (8bit):	5.174350275358575
Encrypted:	false
SSDEEP:	24:KWQF7rfEBHslgT1d1uawBATj/muoBN2t2t2t2t2t2t2tomffffffo:QfEKlgJXwBA3uuSNYYYYYYYomffffffo
MD5:	E0E443E207C75B6C9D6D5DE520BDEF0D
SHA1:	01BC469C9DC2DB065341E1230038C9CD642954E4
SHA-256:	6CA43EA8605DBB702BF684D06C53C0B01D7966E1FCBD408346457A1B31F2F516
SHA-512:	8935E04E7F990FFAE43F0F95155BCBA496E829BAA0D2F1E950C0DD4893D7F65877B742E9BAFBC8F913D45AAD8973AAF5943B66A4417F1C1CE45B9053E8332CC2
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["general hospital hospital spoilers","pga tour valspar championship golf picks","new mexico dust storms","southwest airlines fare changes","nasa astronauts return","pokemon go deep depths research tasks","houston astros city connect uniforms","travel advisory germany"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"1396195062914431068","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	82489
Entropy (8bit):	6.034808434265687
Encrypted:	false
SSDEEP:	1536:wRxvFRWLNi04D5KLNEvLuFqpvEkx1xvFRWLNi04D5KLNEvLuFqpvEkxaI1mwmC4L:wbNRHKLELuFuJxvNRHKLELuFuJxaI1jS
MD5:	42A6F183E0325EAEC3E123944C18FA80
SHA1:	8D966608327C050AF46C73B1E9F6BBD74E0523BC
SHA-256:	8E556258D841AA953E48C604B2F29C565A66807CBFB955A60CF6F25C7165A9D5
SHA-512:	D15F1872091976CC51C07776687CB8B17D4AD342834DD536DA61DE1B7398D39E3743A8E348AE66C4158637E718D2CDEB84BE36B5077151793EAA742CA6A7807A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/ddljson?async=ntp:2
Preview:	)]}'.{"ddljson":{"accessibility_description":"","alt_text":"Men\u0027s College Basketball Tournament First Round 2025","dark_data_uri":"data:image/png;base64,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

\Device\ConDrv

Download File

Process:	C:\Windows\System32\nslookup.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	100
Entropy (8bit):	4.2783819682640365
Encrypted:	false
SSDEEP:	3:cP901XRtuLntv4r84GNIWRtuRz6w:o901Xb6d4o4GmWbZw
MD5:	06BF0C4A415A0A6A22E999937417FB93
SHA1:	B219E0D181C4351A2B8AAB37834214B05929EEED
SHA-256:	178344A183373B3EB2437B1F2C05FF3F48AADA5FE3BA6ACB8E135353839359A9
SHA-512:	44828E150780A3308338B6D5BB28BD2BF6F5251BF7FC529BEC6B636023644E1316BA7DA5082891D7B01B38CFFF57111C6B026B3422F5EEDB89AAFB310669CFED
Malicious:	false
Reputation:	low
Preview:	Server: one.one.one.one..Address: 1.1.1.1....Name: dns-e.ns4v.icu..Address: 142.202.190.19....

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 2530
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 15:05:28.259959936 CET	49718	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.260354996 CET	49719	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.267478943 CET	49720	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.267534971 CET	443	49720	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.267816067 CET	49720	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.267955065 CET	49720	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.267971992 CET	443	49720	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.300790071 CET	49720	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.301168919 CET	49721	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.301207066 CET	443	49721	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.301362991 CET	49721	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.301626921 CET	49721	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.301645041 CET	443	49721	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.344357014 CET	443	49720	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.411052942 CET	80	49718	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.411144972 CET	49718	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.432857990 CET	80	49719	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.435802937 CET	49719	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.443768978 CET	443	49720	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.455840111 CET	443	49721	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.456748962 CET	49722	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.456770897 CET	443	49722	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.457065105 CET	49722	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.457421064 CET	49722	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.457432985 CET	443	49722	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.648542881 CET	443	49722	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.651470900 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.832176924 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:28.832259893 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:28.832499027 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:29.020622969 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:29.022066116 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:29.070235968 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:29.096971035 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:29.280015945 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:29.323249102 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:29.466655016 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:29.482470036 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:29.482470989 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:29.767309904 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:29.783308029 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:29.786115885 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:30.372239113 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:30.388324976 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:30.388336897 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:30.899420977 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:31.044672966 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:31.202286005 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:31.348910093 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:31.586299896 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:31.602296114 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:31.602475882 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:31.810281992 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:31.954286098 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:32.131180048 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:32.131220102 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:32.131376028 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:32.131581068 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:32.131599903 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:32.344772100 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:32.344873905 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:32.346031904 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:32.346045017 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:32.346358061 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:32.399204969 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:33.022214890 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:33.162223101 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:33.991255045 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:34.007296085 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:34.009001017 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:35.431694031 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:35.583233118 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:38.802238941 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:38.811280012 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:38.811288118 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:40.232275963 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:40.392241001 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:42.348726034 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:42.348797083 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:42.348895073 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:43.443744898 CET	49730	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:43.443768024 CET	443	49730	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:44.485899925 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:44.485994101 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:48.009763956 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.009804964 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.009946108 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.010123968 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.010133028 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.330964088 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.331048965 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.332793951 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.332806110 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.333054066 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.336047888 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.376329899 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.411212921 CET	49682	443	192.168.2.17	51.132.193.104
Mar 20, 2025 15:05:48.426261902 CET	49683	80	192.168.2.17	2.17.190.73
Mar 20, 2025 15:05:48.426260948 CET	49671	443	192.168.2.17	52.109.28.46
Mar 20, 2025 15:05:48.645513058 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.645576000 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.645620108 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.645643950 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.645659924 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.645679951 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.645706892 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.687889099 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.687911987 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.687962055 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.687971115 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.688015938 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.749655008 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.749716997 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.749764919 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.749774933 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.749825001 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.749842882 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.772739887 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.772758961 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.772856951 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.772865057 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.772917032 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.790137053 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.790169001 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.790260077 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.790270090 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.790314913 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.843316078 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.843344927 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.843453884 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.843471050 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.843513966 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.867176056 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.867193937 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.867268085 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.867275000 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.867317915 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.887794971 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.887816906 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.887880087 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.887887001 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.887931108 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.911299944 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.911325932 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.911422968 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.911434889 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.911483049 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.951580048 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.951597929 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.951690912 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.951706886 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.951746941 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.986422062 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.986439943 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.986519098 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:48.986526966 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:48.986572027 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.015017033 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.015033960 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.015125036 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.015144110 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.015185118 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.036907911 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.036926031 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.037019014 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.037029982 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.037074089 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.051983118 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.052051067 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.052056074 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.052110910 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.052144051 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.052156925 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.052166939 CET	49737	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.052171946 CET	443	49737	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.107144117 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107142925 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107184887 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.107207060 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.107265949 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107300997 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107469082 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107505083 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.107562065 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107594013 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107610941 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.107645988 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107666969 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.107794046 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.107810974 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.108108044 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.108145952 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.108213902 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.108254910 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.108278990 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.108330011 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.108355999 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.108364105 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.108445883 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.108453989 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.470833063 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.471313953 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.471333027 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.471781969 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.471786022 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.501414061 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.501914024 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.501950026 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.502239943 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.502291918 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.502299070 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.503042936 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.503042936 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.503057003 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.503061056 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.715116978 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.715147018 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.715205908 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.715279102 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.715564013 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.715564013 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.715620041 CET	49738	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.715636015 CET	443	49738	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.718738079 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.718779087 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.719049931 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.719049931 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.719079018 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.762336016 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.762415886 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.762523890 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.762672901 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.762697935 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.762712002 CET	49741	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.762718916 CET	443	49741	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.763796091 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.763890028 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.763997078 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.764123917 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.764142036 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.764170885 CET	49742	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.764179945 CET	443	49742	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.765748978 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.765800953 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.765862942 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.766021013 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.766037941 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.766350985 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.766393900 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.766452074 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.766544104 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.766556025 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.842258930 CET	49672	443	192.168.2.17	52.123.128.14
Mar 20, 2025 15:05:49.955491066 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.956095934 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.956140041 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:49.956952095 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:49.956959009 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.002252102 CET	49673	443	192.168.2.17	204.79.197.203
Mar 20, 2025 15:05:50.091995001 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.093116999 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.093116999 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.093159914 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.093173981 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.152652979 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.153367043 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.153388977 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.153839111 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.153844118 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.221846104 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.223542929 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.223644018 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.223681927 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.223701954 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.223715067 CET	49739	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.223720074 CET	443	49739	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.226766109 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.226820946 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.226912022 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.227036953 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.227051020 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.338582039 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.339315891 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.339378119 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.339421034 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.339421034 CET	49743	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.339440107 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.339448929 CET	443	49743	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.342331886 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.342387915 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.342462063 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.342622042 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.342639923 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.418040991 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.419466019 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.419560909 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.419590950 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.419612885 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.419627905 CET	49745	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.419636011 CET	443	49745	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.423192024 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.423304081 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.423403025 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.423552036 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.423588037 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.520154953 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.522248030 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.522284031 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.522716045 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.522721052 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.574026108 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.575236082 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.575269938 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.577595949 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.577601910 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.769717932 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.769848108 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.769912958 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.770121098 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.770140886 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.770150900 CET	49746	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.770158052 CET	443	49746	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.773112059 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.773153067 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.773252010 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.773411989 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.773423910 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.777950048 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.778336048 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.778364897 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.778764963 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.778773069 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.804965973 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.805001020 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.805080891 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.805110931 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.805174112 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.805268049 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.805273056 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.805285931 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.805430889 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.805464983 CET	443	49740	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.805499077 CET	49740	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.807719946 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.807760000 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.807837963 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.807962894 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.807974100 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.822449923 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.822864056 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.822954893 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.823333025 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:50.823348045 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:50.982721090 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:50.982768059 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:50.982855082 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:50.982990980 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:50.983005047 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.125938892 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.131397009 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.131436110 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.132206917 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.132213116 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.150301933 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.150391102 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.150461912 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.151412964 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.151442051 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.151457071 CET	49747	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.151463032 CET	443	49747	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.154422045 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.154473066 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.154550076 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.154743910 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.154755116 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.225266933 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.225723028 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.225747108 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.226288080 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.226332903 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.226413012 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.226610899 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.226665020 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.226732016 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.226883888 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.226936102 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.226994038 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.227037907 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.227046013 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.227180004 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.227188110 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.227273941 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.227289915 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.227368116 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.227385998 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.296494007 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.297153950 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.297250032 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.297574997 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.297590971 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.394629002 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.394737005 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.394799948 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.394967079 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.394995928 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.395014048 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.395042896 CET	49749	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.395050049 CET	443	49749	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.395055056 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.395101070 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.395188093 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.395207882 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.395220995 CET	49748	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.395227909 CET	443	49748	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.398273945 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.398319960 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.398385048 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.398432970 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.398437977 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.398469925 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.398561001 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.398571968 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.398698092 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.398710966 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.453434944 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.453697920 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.453722954 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.453834057 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.453838110 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.466903925 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.467113972 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.467124939 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.467207909 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.467333078 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.467339039 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.467540026 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.467571974 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.467710018 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.467715979 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.510790110 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.511795998 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.511909008 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.512777090 CET	49751	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.512795925 CET	443	49751	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.521027088 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.521507978 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.521544933 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.521951914 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.521958113 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.552403927 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.553000927 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.553100109 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.553196907 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.553198099 CET	49744	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.553248882 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.553265095 CET	443	49744	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.556332111 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.556365013 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.556447983 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.556595087 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.556608915 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.624053001 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.624553919 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.624587059 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.625000954 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.625005960 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.701229095 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.701276064 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.701361895 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.701375961 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.701467037 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.701505899 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.701512098 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.704829931 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.705041885 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.705048084 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.706041098 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.706135988 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.706140995 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.708265066 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.708831072 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.708877087 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.709299088 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.709305048 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.710818052 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.710896015 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.710901976 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.741251945 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.741359949 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.741527081 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.742228985 CET	49755	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.742253065 CET	443	49755	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.747688055 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.748213053 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.748239040 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.748716116 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.748722076 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.754230976 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.754261971 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.763941050 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.764261007 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.764328003 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.764375925 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.764375925 CET	49752	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.764394999 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.764405012 CET	443	49752	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.767193079 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.767240047 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.767380953 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.767503023 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.767517090 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.768940926 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.768980980 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.769021988 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.769032955 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.769094944 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.769124985 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.769133091 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.769140005 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.769193888 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.777297020 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.787414074 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.787477970 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.787493944 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.792927027 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.792983055 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.792995930 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.797385931 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.797553062 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.797581911 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.798935890 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.798979998 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.798993111 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.801528931 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.802517891 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.802536964 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.809341908 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.810522079 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.810538054 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.821176052 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.822526932 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.822544098 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.831032038 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.831464052 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.831480026 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.840600967 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.840652943 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.840676069 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.849653959 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.849726915 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.849750042 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.850215912 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.857887030 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.858525991 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.858550072 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.867722034 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.870538950 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.870562077 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.875164032 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.876321077 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.876332998 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.883126974 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.883265972 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.883279085 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.891442060 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.892577887 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.893498898 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.893553972 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.893599987 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.893616915 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.893629074 CET	49750	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.893635035 CET	443	49750	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.894279957 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.894512892 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.894517899 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.895370960 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.895401955 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.895420074 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.895431042 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.895479918 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.896271944 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.896327972 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.896481991 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.896965027 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.896977901 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.897787094 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.898323059 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.898332119 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.902509928 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.902872086 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.902991056 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.902998924 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.908467054 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.908499956 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.908533096 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.908543110 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.908595085 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.913805008 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.913924932 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.913934946 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.914918900 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.914984941 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.914997101 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.916249037 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.921317101 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.921576977 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.921591043 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.922410011 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.922501087 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.922580004 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.922796965 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.922796965 CET	49757	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.922821999 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.922833920 CET	443	49757	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.924871922 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.924932957 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.924937963 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.925667048 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.925714970 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.925724983 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.925740004 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.925770044 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.926013947 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.926057100 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.926160097 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.926350117 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.926369905 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.928227901 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.928318024 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.928344011 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.932207108 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.932342052 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.932349920 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.935730934 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.937294006 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.937457085 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.937462091 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.942430019 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.942487001 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.942497015 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.946499109 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.946913958 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.947031021 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.947058916 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.947393894 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.947436094 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.948328018 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.948340893 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.951438904 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.951478958 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.951500893 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.951514006 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.951560020 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.954257965 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.954518080 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.954529047 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.959388971 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.959527016 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.959532976 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.960668087 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.967717886 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.967721939 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.967746019 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.967794895 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.967802048 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.967806101 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.967828035 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.967854977 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.972709894 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.972812891 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.972820997 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.978235960 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.978265047 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.978455067 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.978461027 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.985873938 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.985961914 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.985966921 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.989434958 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.989475012 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.989494085 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.989500046 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.989556074 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.992919922 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.992993116 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.993065119 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.993320942 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.993340969 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.993351936 CET	49756	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.993357897 CET	443	49756	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.994139910 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.994198084 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.994204044 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.994257927 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.994312048 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.994779110 CET	49754	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:51.994792938 CET	443	49754	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:51.996423006 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.996488094 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:51.996579885 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.996759892 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:51.996777058 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.009073019 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.012049913 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.012110949 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.012140036 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.012152910 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.012202024 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.015501022 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.019886017 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.019910097 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.020039082 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.020044088 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.020092010 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.024610043 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.027554989 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.027597904 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.027620077 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.027638912 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.027674913 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.031305075 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.035208941 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.035242081 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.035274029 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.035289049 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.035335064 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.038386106 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.043335915 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.043399096 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.043410063 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.047619104 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.047719955 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.047729969 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.053766012 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.053838015 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.053848028 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.063054085 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.063400030 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.063409090 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.073903084 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.073982000 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.074012995 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.082999945 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.083069086 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.083095074 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.086226940 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.086280107 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.086287022 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.090116024 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.090183973 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.090209961 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.095010042 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.095069885 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.095081091 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.101943970 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.101994991 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.102000952 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.107353926 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.107400894 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.107407093 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.114603043 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.114675045 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.114690065 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.116868019 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.116918087 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.116939068 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.123961926 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.124031067 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.124057055 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.125524044 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.125574112 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.125586987 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.130500078 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.130531073 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.130558968 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.130582094 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.130625010 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.133349895 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.136718988 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.136771917 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.136786938 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.136796951 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.136840105 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.139501095 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.142333031 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.142379045 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.142398119 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.142424107 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.142469883 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.144141912 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.147981882 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.148045063 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.148051977 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.153470039 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.153513908 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.153534889 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.153541088 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.153582096 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.156356096 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158633947 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158674002 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158690929 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.158699989 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158740997 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.158746004 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158798933 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158838987 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.158967972 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.158982992 CET	443	49753	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:52.158993959 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.159023046 CET	49753	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:52.160923958 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.161462069 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.161499023 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.162069082 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.162091970 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.252660990 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.253320932 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.253372908 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.253704071 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.253710985 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.265048027 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.265634060 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.265655041 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.266014099 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.266021013 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.336338997 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.336931944 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.336963892 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.337516069 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.337522984 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.371850014 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.371933937 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.371998072 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.372292995 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.372323036 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.372343063 CET	49758	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.372349024 CET	443	49758	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.376207113 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.376251936 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.376316071 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.376548052 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.376563072 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.417448044 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.417629004 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.417694092 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.417853117 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.417870045 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.417905092 CET	49759	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.417911053 CET	443	49759	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.421117067 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.421180010 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.421264887 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.421442986 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.421458006 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.470572948 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.470655918 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.470726013 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.470974922 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.470998049 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.471013069 CET	49761	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.471021891 CET	443	49761	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.474219084 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.474267006 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.474345922 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.474555969 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.474567890 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.521315098 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.521398067 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.521465063 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.521631002 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.521651983 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.521662951 CET	49760	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.521668911 CET	443	49760	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.525027037 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.525064945 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.525167942 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.525379896 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.525393963 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.563640118 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.563909054 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.563977003 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.564028025 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.564028025 CET	49762	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.564050913 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.564059973 CET	443	49762	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.566642046 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.566684008 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.566766024 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.566904068 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.566915035 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.775609016 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.776146889 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.776166916 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.776734114 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.776743889 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.834254026 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.835035086 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.835076094 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.835598946 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.835608006 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.849951029 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.850567102 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.850596905 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.851119995 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.851126909 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.889517069 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.892749071 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.892771006 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.893167973 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.893174887 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.915118933 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.915607929 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.915632010 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:52.916022062 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:52.916027069 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.101294994 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.101521015 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.101604939 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.101697922 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.101722002 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.101737976 CET	49765	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.101743937 CET	443	49765	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.104648113 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.104748964 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.104841948 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.105027914 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.105063915 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.112917900 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.113006115 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.113076925 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.113174915 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.113189936 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.113214970 CET	49769	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.113220930 CET	443	49769	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.115350008 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.115396976 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.115485907 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.115600109 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.115616083 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.125036955 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.125958920 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.126141071 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.126142025 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.126142025 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.128300905 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.128341913 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.128415108 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.128546000 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.128560066 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.151725054 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.151797056 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.151840925 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.152004957 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.152019978 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.152029037 CET	49770	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.152035952 CET	443	49770	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.154886007 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.154907942 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.155002117 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.155157089 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.155169010 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.437200069 CET	49766	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.437233925 CET	443	49766	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.445718050 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.445800066 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.445853949 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.446072102 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.446072102 CET	49764	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.446089983 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.446100950 CET	443	49764	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.449202061 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.449264050 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.449346066 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.449516058 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.449531078 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.482611895 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.483148098 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.483192921 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.483620882 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.483633041 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.539835930 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.540404081 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.540441990 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.540975094 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.540990114 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.695838928 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.696357965 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.696377039 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.696840048 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.696844101 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.719192028 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.719654083 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.719724894 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.719779015 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.719779015 CET	49771	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.719809055 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.719815016 CET	443	49771	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.722822905 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.722862959 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.722964048 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.723104954 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.723115921 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.806951046 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.807029009 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.807140112 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.807388067 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.807409048 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.807439089 CET	49772	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.807446003 CET	443	49772	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.810360909 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.810409069 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.810599089 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.810652018 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.810664892 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.947293043 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.947381973 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.947438955 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.947699070 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.947715998 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.947726011 CET	49774	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.947731972 CET	443	49774	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.951039076 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.951096058 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.951350927 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.951565027 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.951581955 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.959492922 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.959992886 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.960024118 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:53.960474014 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:53.960479975 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.117983103 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.118565083 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.118613005 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.119029045 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.119034052 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.168597937 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.169126034 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.169157028 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.169564009 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.169569016 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.213068008 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.213130951 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.213296890 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.213494062 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.213512897 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.213524103 CET	49773	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.213531017 CET	443	49773	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.216516972 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.216562033 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.216653109 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.216821909 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.216835976 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.285073996 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.285120010 CET	443	49783	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.285229921 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.285351992 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.285362959 CET	443	49783	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.319825888 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.319953918 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.320053101 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.320288897 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.320317030 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.320350885 CET	49779	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.320358038 CET	443	49779	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.323565006 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.323611021 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.323710918 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.323853970 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.323865891 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.421003103 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.421076059 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.421142101 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.421447039 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.421468973 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.421480894 CET	49778	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.421488047 CET	443	49778	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.426417112 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.426481962 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.426573038 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.426712036 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.426729918 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.538428068 CET	443	49783	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.538698912 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.538724899 CET	443	49783	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.538824081 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.538829088 CET	443	49783	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.552982092 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.553561926 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.553596020 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.554013968 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.554018974 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.653471947 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.654062986 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.654095888 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.654555082 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.654562950 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.756362915 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.756484985 CET	443	49783	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.756591082 CET	49783	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.756599903 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.756679058 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.756724119 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.756865025 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.756884098 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.756921053 CET	49782	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.756927013 CET	443	49782	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.757252932 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.757316113 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.757402897 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.757555962 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.757556915 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.757563114 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.758008957 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.758065939 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.758438110 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.758444071 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.759779930 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.759820938 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.759928942 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.760045052 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.760056019 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.871051073 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.871186018 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.871272087 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.871464968 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.871484041 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.871495962 CET	49784	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.871503115 CET	443	49784	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.874449015 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.874499083 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.874579906 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.874753952 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:54.874767065 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:54.917027950 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.917073965 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:54.917181015 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.917330027 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:54.917341948 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.000690937 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.001338005 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.001431942 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.001673937 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.001689911 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.016199112 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.016316891 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.016761065 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.016772985 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.017002106 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.017239094 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.022901058 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.024570942 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.024642944 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.024702072 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.024725914 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.024738073 CET	49785	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.024744034 CET	443	49785	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.028485060 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.028522968 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.028628111 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.028747082 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.028759003 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.064330101 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.156941891 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.157057047 CET	443	49787	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.157145023 CET	49787	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.158082008 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.158130884 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.158231020 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.158452988 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.158466101 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.164376974 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.164933920 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.164958954 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.165499926 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.165505886 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.181108952 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.181229115 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.181751966 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.181763887 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.181983948 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.182238102 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.224334955 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.263056040 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.263673067 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.263727903 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.264082909 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.264089108 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.272944927 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.274235964 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.274322033 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.274386883 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.274410963 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.274422884 CET	49775	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.274429083 CET	443	49775	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.276969910 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.277024984 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.277117968 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.277313948 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.277328014 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.354152918 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.354274035 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.354762077 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.354784012 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.355057955 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.410607100 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.418571949 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.418646097 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.418767929 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.419547081 CET	49788	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.419560909 CET	443	49788	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.421236038 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.421336889 CET	443	49790	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.421403885 CET	49790	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.431674957 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.434928894 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.435022116 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.435122967 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.435261965 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.435292959 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.476341009 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.481842041 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.482306004 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.482345104 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.482696056 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.482703924 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.504897118 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.505958080 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.506040096 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.506131887 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.506154060 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.506167889 CET	49789	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.506175041 CET	443	49789	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.509581089 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.509625912 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.509696007 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.509861946 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.509876966 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.601614952 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.611032963 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.611110926 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.612082958 CET	49792	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.612112045 CET	443	49792	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.664705992 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.665348053 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.665390968 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.665700912 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.665709019 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.738641977 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.738734007 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.738789082 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.739017010 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.739042997 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.739056110 CET	49780	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.739062071 CET	443	49780	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.740559101 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.740992069 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.741046906 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.741576910 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.741584063 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.742062092 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.742095947 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.742191076 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.742328882 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.742341995 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.852734089 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.853317976 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.853343010 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.853743076 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.853750944 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.871805906 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.871841908 CET	443	49797	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.871922970 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.872052908 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:55.872065067 CET	443	49797	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:55.895493984 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.898133993 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.898252010 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.898252964 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.898308039 CET	49793	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.898336887 CET	443	49793	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.901107073 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.901189089 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.901261091 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.901422024 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.901442051 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.948715925 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.948806047 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.948887110 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.949321985 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.949348927 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.949362040 CET	49794	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.949368954 CET	443	49794	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.952579975 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.952634096 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:55.952755928 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.952919960 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:55.952934980 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.045809984 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.046051979 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.046130896 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.046204090 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.046220064 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.046231031 CET	49795	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.046237946 CET	443	49795	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.049077988 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.049129963 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.049217939 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.049384117 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.049401999 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.073273897 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.073828936 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.073848963 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.074304104 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.074310064 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.103959084 CET	443	49797	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.104336023 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.104353905 CET	443	49797	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.104460955 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.104465961 CET	443	49797	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.202951908 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.203504086 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.203542948 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.203954935 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.203962088 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.236753941 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.236834049 CET	443	49797	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.236892939 CET	49797	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.237551928 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.237597942 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.237672091 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.237822056 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.237843037 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.313993931 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.314074039 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.314188957 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.314471006 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.314486980 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.314512014 CET	49796	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.314517975 CET	443	49796	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.320116997 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.320183992 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.320312023 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.320518017 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.320535898 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.346677065 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.347275019 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.347295046 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.347609043 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.347727060 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.347733021 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.347893953 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.347907066 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.348227978 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.348232985 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.396339893 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.398127079 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.398272991 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.398350954 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.398408890 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.398435116 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.398447990 CET	49798	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.398453951 CET	443	49798	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.398597002 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.398628950 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.399040937 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.399046898 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.402142048 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.402175903 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.402254105 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.402384996 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.402395964 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.430219889 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.430279970 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.430375099 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.430515051 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.430526018 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.475462914 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.475585938 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.476005077 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.476022005 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.476274967 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.476799011 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.520337105 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.578041077 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.589082003 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.589221001 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.589251041 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.589271069 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.589282036 CET	49791	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.589289904 CET	443	49791	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.592726946 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.592761040 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.592820883 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.592964888 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.592972040 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.632350922 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.632415056 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.632494926 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.632673025 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.632690907 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.632700920 CET	49799	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.632713079 CET	443	49799	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.635680914 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.635740995 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.635818005 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.636497021 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.636517048 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.661107063 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.661214113 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.661268950 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.661370993 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.661395073 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.661407948 CET	49800	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.661412954 CET	443	49800	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.662977934 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.663160086 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.663518906 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.663532019 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.663779020 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.664202929 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.664263010 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.664349079 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.664515972 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.664549112 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.686570883 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.687060118 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.687098026 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.687475920 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.687483072 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.710351944 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.730055094 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.730794907 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.730911970 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.732049942 CET	49802	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:56.732079029 CET	443	49802	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:56.778892994 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.779457092 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.779505014 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.779931068 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.779937029 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.931241035 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.931899071 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.931938887 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.932358027 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.932368994 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.997823954 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.998497009 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.998553991 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:56.998945951 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:56.998955965 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.017565012 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.018109083 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.018167019 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.018564939 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.018579960 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.020802021 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.020878077 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.020941973 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.021116018 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.021151066 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.021163940 CET	49804	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.021171093 CET	443	49804	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.023926020 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.023977041 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.024049044 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.024202108 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.024213076 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.117593050 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.117852926 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.117959976 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.118200064 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.118227959 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.118240118 CET	49803	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.118247032 CET	443	49803	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.121948957 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.122006893 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.122097015 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.122293949 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.122314930 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.133764029 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.133829117 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.133927107 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.134052038 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.134063005 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.134077072 CET	49806	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.134083033 CET	443	49806	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.136735916 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.136842012 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.136950970 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.137079954 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.137116909 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.259149075 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.259264946 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.259371042 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.259519100 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.259562016 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.259577990 CET	49808	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.259588003 CET	443	49808	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.263112068 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.263158083 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.263242006 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.263417006 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.263433933 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.300743103 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.300841093 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.300945044 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.301165104 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.301191092 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.301203012 CET	49807	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.301209927 CET	443	49807	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.303868055 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.303915977 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.303991079 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.304135084 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.304147959 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.343157053 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.343873978 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.343907118 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.344460964 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.344470024 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.509289980 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.510236979 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.510266066 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.511039972 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.511045933 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.518953085 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.519484997 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.519535065 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.520006895 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.520024061 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.579560041 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.579991102 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.580071926 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.580127001 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.580142975 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.580177069 CET	49809	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.580183029 CET	443	49809	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.583769083 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.583807945 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.583910942 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.584095001 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.584105015 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.599050045 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.599720001 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.599751949 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.600290060 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.600295067 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.772768021 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.783185005 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.783272028 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.783529997 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.783641100 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.783694983 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.783730984 CET	49811	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.783749104 CET	443	49811	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.787833929 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.787867069 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.787976980 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.788203001 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.788220882 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.822159052 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.822242022 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.822365999 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.823237896 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.823261976 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.823820114 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.823821068 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.823831081 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.823833942 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.823844910 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.823846102 CET	49812	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.823851109 CET	443	49812	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.824033022 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.824071884 CET	443	49810	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.824110031 CET	49810	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.840594053 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.840635061 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.840744019 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.840898991 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.840924025 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.840935946 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.840954065 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.841012001 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.842658997 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.842792988 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.842817068 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.843162060 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.843183994 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.843806982 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:57.843811989 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:57.922770977 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:57.964334965 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.077166080 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.080316067 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.080563068 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.081404924 CET	49805	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.081429958 CET	443	49805	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.096249104 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.096329927 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.096389055 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.096673965 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.096693993 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.096750975 CET	49813	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.096757889 CET	443	49813	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.100236893 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.100296021 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.100403070 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.100593090 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.100608110 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.117522001 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.118210077 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.118305922 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.118741035 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.118757963 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.129142046 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.129213095 CET	443	49819	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.129344940 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.129776001 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.129802942 CET	443	49819	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.149684906 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.150441885 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.150475025 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.151129961 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.151135921 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.231106043 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.231931925 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.231990099 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.232425928 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.232433081 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.316952944 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.317106962 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.317250013 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.317497969 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.317523003 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.317538023 CET	49815	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.317544937 CET	443	49815	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.321257114 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.321316004 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.321419001 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.321616888 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.321640015 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.347369909 CET	443	49819	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.348004103 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.348064899 CET	443	49819	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.348220110 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.348228931 CET	443	49819	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.363146067 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.363239050 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.363327980 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.363636017 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.363657951 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.363694906 CET	49816	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.363703012 CET	443	49816	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.367243052 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.367305040 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.367410898 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.367626905 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.367643118 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.445523977 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.445646048 CET	443	49819	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.445710897 CET	49819	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.446520090 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.446561098 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.446631908 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.446861029 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.446877003 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.456490993 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.457287073 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.457340956 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.457691908 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.457700014 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.464549065 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.464673042 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.464754105 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.464963913 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.464989901 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.465022087 CET	49817	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.465028048 CET	443	49817	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.468907118 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.468955040 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.469027996 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.469230890 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.469244957 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.657948017 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.658679008 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.658694029 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.659379959 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.659388065 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.693782091 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.694076061 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.694144011 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.694340944 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.694365978 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.694408894 CET	49818	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.694416046 CET	443	49818	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.698782921 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.698822021 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.698896885 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.699079037 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.699091911 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.710656881 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.710741043 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.713388920 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.713402033 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.713676929 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.714042902 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:58.760323048 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:58.787578106 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.788366079 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.788407087 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.788453102 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.788808107 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.788817883 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.788849115 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.788866043 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.789381981 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.789386988 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.792819977 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.793148994 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.793175936 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.793543100 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.793549061 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.874341965 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.874424934 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.874502897 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.874778032 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.874799013 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.874813080 CET	49820	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.874819994 CET	443	49820	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.878362894 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.878413916 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:58.878515005 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.878724098 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:58.878737926 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.015619993 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:59.015743971 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:59.015829086 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:59.017324924 CET	49822	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:05:59.017344952 CET	443	49822	142.250.65.164	192.168.2.17
Mar 20, 2025 15:05:59.022089005 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.022710085 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.022790909 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.022860050 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.022870064 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.022907972 CET	49823	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.022913933 CET	443	49823	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.026329994 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.026388884 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.026482105 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.026670933 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.026684999 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.031189919 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.050544024 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.050641060 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.050751925 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.050751925 CET	49814	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.050770044 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.050780058 CET	443	49814	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.054585934 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.054624081 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.054707050 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.054903984 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.054914951 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.055450916 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.055969954 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.056049109 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.056098938 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.056109905 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.056123972 CET	49821	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.056128979 CET	443	49821	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.059206963 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.059242964 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.059319973 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.059618950 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.059628963 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.119741917 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.120544910 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.120568991 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.121191025 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.121201038 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.178411007 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.179306984 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.179349899 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.179732084 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.179737091 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.366893053 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.367580891 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.367599964 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.368676901 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.368683100 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.371701956 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.371974945 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.372061968 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.372108936 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.372108936 CET	49825	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.372129917 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.372140884 CET	443	49825	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.376148939 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.376174927 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.376266956 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.376491070 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.376502037 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.410765886 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.411519051 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.411557913 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.412039042 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.412045956 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.465298891 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.466056108 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.466075897 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.466675043 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.466681004 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.577089071 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.577205896 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.577274084 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.577519894 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.577529907 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.577553988 CET	49824	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.577560902 CET	443	49824	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.581259012 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.581352949 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.581408978 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.581547976 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.581564903 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.581577063 CET	49827	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.581582069 CET	443	49827	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.581959963 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.582007885 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.582092047 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.582304001 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.582318068 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.584383011 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.584407091 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.584506989 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.584701061 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.584708929 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.643670082 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.644162893 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.644248009 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.644303083 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.644326925 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.644342899 CET	49826	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.644350052 CET	443	49826	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.647747040 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.647799969 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.647881031 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.648070097 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.648089886 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.649584055 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:05:59.649636030 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:05:59.742757082 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.742835045 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.742970943 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.743442059 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.743442059 CET	49828	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.743453979 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.743463039 CET	443	49828	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.746943951 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.746978998 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.747076035 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.747292042 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.747303009 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.762212992 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.762888908 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.762919903 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.763298035 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.763304949 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.904879093 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.905509949 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.905530930 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.906037092 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.906040907 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.939110041 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.940324068 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.940366030 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.940689087 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.940696001 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.988787889 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.989350080 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.989439011 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:05:59.989860058 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:05:59.989880085 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.071409941 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.072139978 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.072154999 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.072761059 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.072772980 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.101048946 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.101804972 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.101874113 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.101907969 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.101928949 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.101943970 CET	49831	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.101953983 CET	443	49831	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.105196953 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.105238914 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.105317116 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.105520964 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.105530024 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.141237020 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.141537905 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.141621113 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.141670942 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.141690969 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.141701937 CET	49830	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.141707897 CET	443	49830	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.145057917 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.145111084 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.145237923 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.145389080 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.145401955 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.204175949 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.204210043 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.204284906 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.204499960 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.204499960 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.204715014 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.204736948 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.204750061 CET	49832	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.204755068 CET	443	49832	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.208486080 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.208512068 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.208586931 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.208775043 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.208787918 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.231511116 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.231556892 CET	443	49837	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.231651068 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.231801987 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.231815100 CET	443	49837	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.267014980 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.267095089 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.267294884 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.267424107 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.267441988 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.267452002 CET	49833	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.267460108 CET	443	49833	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.281618118 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.281672001 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.281761885 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.283586979 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.283598900 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.388935089 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.389008999 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.389081955 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.389378071 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.389405966 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.389420986 CET	49829	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.389426947 CET	443	49829	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.392977953 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.393028021 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.393102884 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.393286943 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.393306971 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.505465984 CET	443	49837	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.505847931 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.505888939 CET	443	49837	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.506041050 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.506048918 CET	443	49837	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.512177944 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.512833118 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.512854099 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.513412952 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.513418913 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.553304911 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.553849936 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.553889990 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.554414034 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.554421902 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.575095892 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.575654984 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.575684071 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.576142073 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.576148987 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.620698929 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.620817900 CET	443	49837	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.620894909 CET	49837	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.621778965 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.621810913 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.621942997 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.622106075 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.622117996 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.679209948 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.679878950 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.679908037 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.680742979 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.680748940 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.682708979 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.683394909 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.683501959 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.683883905 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.683901072 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.777491093 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.780262947 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.780344963 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.780440092 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.780669928 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.780695915 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.780708075 CET	49836	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.780714989 CET	443	49836	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.784936905 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.784970999 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.785073042 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.785268068 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.785280943 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825339079 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825370073 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825453043 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825485945 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825558901 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825577974 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825578928 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825587988 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825588942 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825664043 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825768948 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825793982 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825803995 CET	443	49834	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825846910 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.825860023 CET	49834	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825880051 CET	49835	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.825896978 CET	443	49835	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.829801083 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.829830885 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.829859018 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.829859972 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.829950094 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.830003977 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.830121994 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.830141068 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.830159903 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.830173016 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.851278067 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.851305008 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.851376057 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.851528883 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.851536989 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.874777079 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.874806881 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.874880075 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.874912977 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.874989033 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.875174046 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.875221968 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.875253916 CET	49839	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.875271082 CET	443	49839	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.879188061 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.879211903 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.879297018 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.879470110 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.879475117 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.900017023 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.900103092 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.900660038 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.900667906 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.900901079 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:00.901197910 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:00.935700893 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.935720921 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.935784101 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.935796022 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.935841084 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.936271906 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.936285973 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.936299086 CET	49838	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.936305046 CET	443	49838	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.940454006 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.940473080 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.940645933 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.940782070 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:00.940793037 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:00.948318005 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.018089056 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.018186092 CET	443	49840	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.018269062 CET	49840	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.019079924 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.019119024 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.019210100 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.019391060 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.019402981 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.076776981 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.076919079 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.077555895 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.077562094 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.077788115 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.078069925 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.124317884 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.164797068 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.165584087 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.165604115 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.166115046 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.166120052 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.198363066 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.199141026 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.199187040 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.199748993 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.199755907 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.260839939 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.260974884 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.261728048 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.261738062 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.262008905 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.264569044 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.265897036 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.265897036 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.265928030 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.265944958 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.270850897 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.270927906 CET	443	49844	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.271014929 CET	49844	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.272098064 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.279275894 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.279895067 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.279917955 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.280364990 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.280373096 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.316320896 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.427094936 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.427123070 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.427189112 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.427438974 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.427721977 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.427740097 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.427753925 CET	49841	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.427759886 CET	443	49841	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.431467056 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.431499004 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.431617022 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.431782961 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.431791067 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.486747026 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.487232924 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.487327099 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.487327099 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.488569021 CET	49846	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.488590956 CET	443	49846	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.491030931 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.491086960 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.491197109 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.491341114 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.491355896 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.493820906 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.494247913 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.494306087 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.494344950 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.494344950 CET	49843	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.494360924 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.494371891 CET	443	49843	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.497311115 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.497354031 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.497417927 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.497545004 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.497555971 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.523742914 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.523854017 CET	443	49847	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.523907900 CET	49847	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.524905920 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.524961948 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.525033951 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.525232077 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.525248051 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.612843037 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.613816977 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.613848925 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.614356041 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.614371061 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.716861963 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.716929913 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.717061996 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.717223883 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.717240095 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.800913095 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.801814079 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.801856995 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.802181005 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.802186966 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.817780018 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.817847013 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.817917109 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.818188906 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.818211079 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.818223953 CET	49845	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.818229914 CET	443	49845	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.821882010 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.821940899 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.822047949 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.822181940 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.822199106 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.841988087 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.842825890 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.842859983 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.843475103 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.843481064 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.856467009 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.856547117 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.857039928 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.857039928 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.857705116 CET	49842	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.857721090 CET	443	49842	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.861362934 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.861416101 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.861536026 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.861723900 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:01.861738920 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:01.943945885 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.944139957 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.944868088 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.944886923 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.945111036 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:01.945475101 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:01.992327929 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.028503895 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.028805971 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.029050112 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.029050112 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.029050112 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.032320976 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.032361984 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.032469034 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.032630920 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.032648087 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.045578003 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.045691013 CET	443	49852	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.045769930 CET	49852	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.046988964 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.047036886 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.047224998 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.047497034 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.047508955 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.094691038 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.138254881 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.138288021 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.138417006 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.138430119 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.138439894 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.138673067 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.138715029 CET	443	49850	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.138756037 CET	49850	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.141856909 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.141896009 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.141988039 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.142170906 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.142182112 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.156752110 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.157316923 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.157354116 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.157840967 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.157846928 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.253099918 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.253916025 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.254009962 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.254467964 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.254489899 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.307423115 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.307559013 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.308094978 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.308104038 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.308353901 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.308641911 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.316478968 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.316493034 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.316539049 CET	443	49856	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.316622019 CET	49856	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.317620993 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.317676067 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.317761898 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.317918062 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.317934036 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.330275059 CET	49848	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.330302000 CET	443	49848	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.355820894 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.355907917 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.356133938 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.356323004 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.356355906 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.356372118 CET	49853	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.356379032 CET	443	49853	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.359940052 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.359994888 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.360107899 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.360308886 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.360342979 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.385505915 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.386226892 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.386260033 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.386775970 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.386781931 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.510452986 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.511084080 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.511117935 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.511725903 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.511739016 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.532279968 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.532594919 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.532682896 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.532740116 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.532741070 CET	49854	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.532769918 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.532782078 CET	443	49854	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.536586046 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.536614895 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.536703110 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.536890984 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.536906004 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.579088926 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.579190016 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.579809904 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.579824924 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.580080032 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.580612898 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.595504045 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.595603943 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.596182108 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.596201897 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.596462965 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.624325991 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.638195992 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.672012091 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.672081947 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.672167063 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.674127102 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.674145937 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.674158096 CET	49855	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.674165964 CET	443	49855	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.691682100 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.691709995 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.691829920 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.693939924 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.693950891 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.729480028 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.731765985 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.731812954 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.732336998 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.732343912 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.797094107 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.797132969 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.797189951 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.797211885 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.797251940 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.797507048 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.797528028 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.797545910 CET	49857	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.797554016 CET	443	49857	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.800885916 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.800920010 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.801018953 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.801197052 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.801206112 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.845818043 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.846798897 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.846887112 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.847815990 CET	49858	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.847836018 CET	443	49858	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.859381914 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:02.900330067 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:02.904247999 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.904946089 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.904972076 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.905445099 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.905450106 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.965903997 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.966275930 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.966387987 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.966538906 CET	49859	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.966553926 CET	443	49859	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.970181942 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.970215082 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:02.970312119 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.970526934 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:02.970540047 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.001879930 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.002665997 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.002697945 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.003164053 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.003170967 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.049290895 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.050010920 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.050039053 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.050528049 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.050533056 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.050864935 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:03.057539940 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:03.057655096 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:03.058618069 CET	49851	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:03.058640957 CET	443	49851	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:03.120933056 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.121803045 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.121833086 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.122334003 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.122339010 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.133447886 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.133570910 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.133627892 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.133658886 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.133719921 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.134002924 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.134002924 CET	49860	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.134025097 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.134037018 CET	443	49860	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.138293982 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.138339043 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.138442039 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.138644934 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.138655901 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.198307037 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.198499918 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.198636055 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.198879957 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.198896885 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.198931932 CET	49861	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.198937893 CET	443	49861	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.202837944 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.202892065 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.202972889 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.203161955 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.203175068 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.265455961 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.265544891 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.265691996 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.266079903 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.266109943 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.266127110 CET	49849	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.266136885 CET	443	49849	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.269747019 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.269790888 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.269881010 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.270128965 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.270142078 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.334723949 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.335365057 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.335469007 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.335515976 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.335515976 CET	49862	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.335535049 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.335550070 CET	443	49862	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.338851929 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.338968992 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.339083910 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.339227915 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.339266062 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.345561028 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.346149921 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.346225977 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.346724033 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.346749067 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.496274948 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.496819019 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.496835947 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.497329950 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.497335911 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.582161903 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.582751036 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.582807064 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.583261967 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.583268881 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.589735985 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.590142012 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.590179920 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.590524912 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.590532064 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.616983891 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.618042946 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.618108988 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.618168116 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.618191004 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.618202925 CET	49863	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.618210077 CET	443	49863	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.621340036 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.621373892 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.621517897 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.621658087 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.621666908 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.718869925 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.719489098 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.719525099 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.719926119 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.719932079 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.740972996 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.741008043 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.741070032 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.741115093 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.741422892 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.741422892 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.741441965 CET	49864	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.741455078 CET	443	49864	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.744864941 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.744915009 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.744997025 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.745172977 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.745187044 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.925854921 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:03.925894022 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:03.925987959 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:03.926126003 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:03.926136017 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:03.935678959 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.935755968 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.935821056 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.936065912 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.936085939 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.936096907 CET	49866	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.936104059 CET	443	49866	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.939089060 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.939131975 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.939289093 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.939517021 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.939527988 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.967580080 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.967720985 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.967811108 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.967998028 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.967998028 CET	49867	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.968048096 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.968077898 CET	443	49867	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.970820904 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.970866919 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.970949888 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.971138000 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.971149921 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.976578951 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.977009058 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.977030993 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:03.977488995 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:03.977494001 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.089672089 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.090285063 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.090329885 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.090641022 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.090646982 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.142184973 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.142261982 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.142457962 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.142641068 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.142641068 CET	49865	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.142664909 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.142676115 CET	443	49865	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.145550013 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.145597935 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.145700932 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.145854950 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.145873070 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.188229084 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.188288927 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.188359976 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.188478947 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.188478947 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.188663006 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.188682079 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.188694000 CET	49868	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.188699961 CET	443	49868	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.190522909 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:04.190829039 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:04.190846920 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:04.190979958 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:04.190984964 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:04.191607952 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.191706896 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.191857100 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.192044973 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.192080975 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.292582989 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.292838097 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.292907000 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.292994976 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.293018103 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.293029070 CET	49869	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.293035030 CET	443	49869	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.296324968 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.296360016 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.296730995 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.296730995 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.296762943 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.306394100 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.306895018 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.306972980 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.307413101 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.307430029 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.456089973 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.456765890 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.456805944 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.457525015 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.457531929 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.492718935 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:04.494353056 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:04.496332884 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:04.496332884 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:04.536617041 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.536655903 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.536710024 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.536796093 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.536819935 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.537076950 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.537096977 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.537106991 CET	49871	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.537113905 CET	443	49871	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.540174007 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.540220976 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.540297985 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.540462017 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.540476084 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.587949991 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.588572025 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.588655949 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.589019060 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.589029074 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.660164118 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.660254002 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.660332918 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.660665035 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.660665035 CET	49873	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.660689116 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.660702944 CET	443	49873	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.663486004 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.663522005 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.663630962 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.663841963 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.663858891 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.715607882 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.716334105 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.716367960 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.716944933 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.716953039 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.768537998 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.769149065 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.769191027 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.769615889 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.769623995 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.802474022 CET	49870	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:04.802504063 CET	443	49870	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:04.844006062 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.844094038 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.844191074 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.844367027 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.844389915 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.844403028 CET	49874	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.844408989 CET	443	49874	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.847371101 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.847409010 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.847558975 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.847742081 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.847757101 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.945348978 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.945385933 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.945446968 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.945605040 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.945605040 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.946086884 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.946086884 CET	49875	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.946109056 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.946120024 CET	443	49875	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.950474024 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.950501919 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:04.950663090 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.951040983 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:04.951052904 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.009815931 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.010024071 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.010109901 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.010247946 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.010270119 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.010284901 CET	49872	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.010291100 CET	443	49872	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.013499022 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.013547897 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.013632059 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.013761044 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.013777018 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.219543934 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.220163107 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.220195055 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.220906973 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.220911980 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.307327032 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.307892084 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.307918072 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.308365107 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.308376074 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.416836023 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.417551041 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.417584896 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.418123960 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.418132067 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.452882051 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.452970982 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.453032970 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.453753948 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.453777075 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.453790903 CET	49878	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.453798056 CET	443	49878	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.456854105 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.456895113 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.456967115 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.457102060 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.457112074 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.538477898 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.539282084 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.539338112 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.539350986 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.539366007 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.539467096 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.539495945 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.539495945 CET	49879	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.539524078 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.539541006 CET	443	49879	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.542581081 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.542624950 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.542696953 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.542870998 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.542881012 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.630525112 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.631117105 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.631158113 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.631422997 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.631611109 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.631669998 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.631706953 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.631706953 CET	49880	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.631726980 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.631737947 CET	443	49880	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.631762981 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.631768942 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.635432959 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.635478973 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.635549068 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.635696888 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.635706902 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.822046995 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.822647095 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.822668076 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.823132992 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.823138952 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.863733053 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.863817930 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.863889933 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.864099979 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.864124060 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.864137888 CET	49877	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.864145041 CET	443	49877	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.867630005 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.867674112 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.867777109 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.867948055 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.867959023 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.908560991 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.909149885 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.909188986 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.909648895 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.909655094 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.942198038 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.942791939 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.942825079 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.943270922 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.943276882 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.977307081 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.977870941 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.977905035 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:05.978306055 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:05.978315115 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.035175085 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.035255909 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.035326958 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.035528898 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.035547018 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.035558939 CET	49881	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.035564899 CET	443	49881	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.038989067 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.039016962 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.039098978 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.039295912 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.039305925 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.050721884 CET	49886	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.050781012 CET	443	49886	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.050877094 CET	49886	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.051029921 CET	49886	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.051044941 CET	443	49886	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.052053928 CET	49887	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.052114010 CET	443	49887	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.052205086 CET	49887	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.052345037 CET	49887	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.052360058 CET	443	49887	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.133482933 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.133569002 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.133667946 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.133934021 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.133959055 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.133975983 CET	49876	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.133982897 CET	443	49876	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.139616013 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.139658928 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.139743090 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.139966965 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.139982939 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.187601089 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.187912941 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.187978983 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.187988997 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.188030958 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.188128948 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.188146114 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.188157082 CET	49883	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.188163996 CET	443	49883	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.191364050 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.191410065 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.191498995 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.191648960 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.191663980 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.202393055 CET	443	49886	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.202969074 CET	49890	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.202996969 CET	443	49890	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.203087091 CET	49890	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.203255892 CET	49890	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.203267097 CET	443	49890	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.213623047 CET	443	49887	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.214015007 CET	49891	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.214077950 CET	443	49891	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.214173079 CET	49891	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.214288950 CET	49891	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:06.214301109 CET	443	49891	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.215913057 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.216473103 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.216511965 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.216901064 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.216907978 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.256405115 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.256486893 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.256572962 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.256824017 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.256844997 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.256887913 CET	49882	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.256895065 CET	443	49882	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.259977102 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.260027885 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.260111094 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.260313988 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.260329008 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.375232935 CET	443	49891	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.380666018 CET	443	49890	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:06.437989950 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.438585043 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.438621044 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.439188957 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.439213991 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.464941978 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.465358973 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.465426922 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.465476990 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.465502977 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.465517044 CET	49884	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.465523005 CET	443	49884	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.470402002 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.470458984 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.470529079 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.470989943 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.471009016 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.599167109 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.599881887 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.599919081 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.600378990 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.600388050 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.697659016 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.697745085 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.697839975 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.698091984 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.698112965 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.698126078 CET	49885	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.698132992 CET	443	49885	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.701350927 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.701384068 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.701488018 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.701627970 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.701644897 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.763700962 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.764247894 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.764293909 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.764705896 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.764714003 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.856420994 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.856458902 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.856518984 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.856529951 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.856571913 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.856766939 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.856801033 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.856825113 CET	49889	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.856831074 CET	443	49889	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.859780073 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.859839916 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:06.859925985 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.860090017 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:06.860105038 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.023689032 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.024230957 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.024323940 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.024363041 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.024388075 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.024405003 CET	49888	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.024410963 CET	443	49888	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.027213097 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.027261972 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.028475046 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.028475046 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.028517962 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.062194109 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.062732935 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.062747002 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.063203096 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.063206911 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.191900969 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.192477942 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.192518950 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.192930937 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.192936897 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.233710051 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.234361887 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.234401941 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.234791040 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.234800100 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.320241928 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.357884884 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.358524084 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.358576059 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.358987093 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.358993053 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.361228943 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.361244917 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.361382961 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.361397028 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.361404896 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.361655951 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.361700058 CET	443	49894	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.361742973 CET	49894	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.364382982 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.364432096 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.364531994 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.364705086 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.364720106 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.418976068 CET	49898	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.419028044 CET	443	49898	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.419109106 CET	49899	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.419159889 CET	443	49899	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.419198036 CET	49898	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.419244051 CET	49899	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.419398069 CET	49898	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.419411898 CET	443	49898	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.419617891 CET	49899	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.419635057 CET	443	49899	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.445274115 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.445362091 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.445417881 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.445441008 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.445492029 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.445651054 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.445671082 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.445693016 CET	49895	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.445698977 CET	443	49895	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.449887991 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.449927092 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.450053930 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.450603008 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.450615883 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.487196922 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.487238884 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.487302065 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.487302065 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.487350941 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.487739086 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.487770081 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.487781048 CET	49893	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.487787008 CET	443	49893	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.491204977 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.491245985 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.491328001 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.491477966 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.491492987 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.580954075 CET	443	49899	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.583868980 CET	49902	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.583923101 CET	443	49902	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.584028959 CET	49902	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.585973978 CET	49902	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.585990906 CET	443	49902	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.604865074 CET	443	49898	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.607202053 CET	49903	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.607251883 CET	443	49903	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.607341051 CET	49903	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.609136105 CET	49903	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:07.609165907 CET	443	49903	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.623702049 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.624140024 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.624207020 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.637053967 CET	49892	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.637093067 CET	443	49892	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.660193920 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.660249949 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.660341024 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.662086010 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.662116051 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.692333937 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.693065882 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.693095922 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.693650961 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.693655968 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.763438940 CET	443	49903	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.776070118 CET	443	49902	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:07.817737103 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.818579912 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.818608046 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.819374084 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.819381952 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.947887897 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.948724985 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.948788881 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.948791981 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.948865891 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.948931932 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.948952913 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.948970079 CET	49897	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.948976040 CET	443	49897	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.952871084 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.952925920 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:07.953027964 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.953227043 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:07.953239918 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.127863884 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.128742933 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.128773928 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.129307985 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.129323959 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.352725983 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.353483915 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.353518963 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.354036093 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.354041100 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.376002073 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.376086950 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.376521111 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.376521111 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.376589060 CET	49900	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.376606941 CET	443	49900	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.380862951 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.380917072 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.381030083 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.381306887 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.381320000 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.391882896 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.391982079 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.392265081 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.392332077 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.392353058 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.392368078 CET	49904	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.392374039 CET	443	49904	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.395858049 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.395901918 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.396011114 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.396287918 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.396300077 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.603267908 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.603631020 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.603766918 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.603807926 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.603807926 CET	49905	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.603828907 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.603841066 CET	443	49905	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.607409000 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.607453108 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.607698917 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.607850075 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.607861996 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.789360046 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.789961100 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.789994955 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.790481091 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.790496111 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.835236073 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.836338997 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.836375952 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.836879969 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.836889029 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.872576952 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.873219013 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.873255014 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.873722076 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.873732090 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.974215031 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.974914074 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.974952936 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:08.975426912 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:08.975438118 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.018568993 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.018609047 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.018671036 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.018749952 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.018769979 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.019040108 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.019040108 CET	49907	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.019059896 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.019069910 CET	443	49907	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.022428036 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.022476912 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.022764921 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.022764921 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.022802114 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.123795033 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.124027967 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.124095917 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.124140024 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.124212980 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.124356985 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.124383926 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.124391079 CET	49901	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.124397039 CET	443	49901	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.127640009 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.127690077 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.127810001 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.127950907 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.127960920 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.210340023 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.210438013 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.210534096 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.210762024 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.210783005 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.210796118 CET	49908	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.210803986 CET	443	49908	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.214006901 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.214061975 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.214183092 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.214370966 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.214386940 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.386578083 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.387394905 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.387422085 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.387984991 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.387989998 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.505678892 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.505783081 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.505858898 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.506165981 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.506165981 CET	49896	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.506194115 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.506207943 CET	443	49896	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.510118008 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.510149002 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.510256052 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.510432005 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.510437965 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.519239902 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.519906998 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.519928932 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.520447016 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.520452976 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.545039892 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.545672894 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.545696020 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.546243906 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.546251059 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.566514015 CET	49705	80	192.168.2.17	142.251.40.195
Mar 20, 2025 15:06:09.566622972 CET	49707	80	192.168.2.17	199.232.214.172
Mar 20, 2025 15:06:09.636452913 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.637207031 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.637253046 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.637264013 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.637326002 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.637372017 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.637391090 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.637407064 CET	49910	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.637413025 CET	443	49910	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.641197920 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.641246080 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.641324997 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.641500950 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.641510010 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.693623066 CET	80	49705	142.251.40.195	192.168.2.17
Mar 20, 2025 15:06:09.693721056 CET	49705	80	192.168.2.17	142.251.40.195
Mar 20, 2025 15:06:09.697109938 CET	80	49707	199.232.214.172	192.168.2.17
Mar 20, 2025 15:06:09.697135925 CET	80	49707	199.232.214.172	192.168.2.17
Mar 20, 2025 15:06:09.697182894 CET	49707	80	192.168.2.17	199.232.214.172
Mar 20, 2025 15:06:09.752741098 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.752826929 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.752906084 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.753163099 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.753177881 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.753190041 CET	49912	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.753200054 CET	443	49912	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.757052898 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.757100105 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.757220030 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.757400990 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.757421017 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.826246977 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.826899052 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.826929092 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:09.827544928 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:09.827550888 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.053275108 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.053524971 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.053603888 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.053738117 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.053738117 CET	49913	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.053756952 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.053767920 CET	443	49913	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.057483912 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.057523966 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.057600021 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.057771921 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.057790041 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.061635017 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.062068939 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.062102079 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.062668085 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.062674046 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.284704924 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.284781933 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.285083055 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.285214901 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.285243034 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.285255909 CET	49911	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.285262108 CET	443	49911	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.289175034 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.289223909 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.289298058 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.289500952 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.289520025 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.452342987 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.452954054 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.452996016 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.453538895 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.453547955 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.609299898 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.609333992 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.609381914 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.609401941 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.609442949 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.609698057 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.609714031 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.609724998 CET	49914	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.609731913 CET	443	49914	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.614109993 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.614152908 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.614227057 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.614408016 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.614418983 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.633323908 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.634138107 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.634187937 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.634814978 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.634825945 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.639101028 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.639684916 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.639725924 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.640126944 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.640132904 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.709805965 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.710280895 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.710345030 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.710352898 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.710412979 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.710470915 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.710489988 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.710505962 CET	49916	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.710513115 CET	443	49916	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.713897943 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.713944912 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.714025021 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.714230061 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.714246035 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.909977913 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.910059929 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.910115004 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.910361052 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.910381079 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.910398006 CET	49917	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.910403967 CET	443	49917	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.914518118 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.914567947 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.914637089 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.914819956 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.914834023 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.930495977 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.930557966 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.930903912 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.930938959 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.930957079 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.930969000 CET	49906	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.930974007 CET	443	49906	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.933803082 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.933847904 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.934102058 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.934261084 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.934274912 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.941956997 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.942425966 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.942441940 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:10.942950010 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:10.942956924 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.035505056 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.036324978 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.036349058 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.036889076 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.036897898 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.155498981 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.156151056 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.156181097 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.156723976 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.156730890 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.174518108 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.174698114 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.174844027 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.174966097 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.174979925 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.174990892 CET	49918	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.174997091 CET	443	49918	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.178584099 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.178622961 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.178710938 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.178911924 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.178930998 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.271548033 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.271636963 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.271758080 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.272072077 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.272089005 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.272104025 CET	49919	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.272109985 CET	443	49919	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.276552916 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.276602983 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.276766062 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.276956081 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.276976109 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.302480936 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.303095102 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.303128958 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.303725958 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.303740978 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.316015005 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.316485882 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.316517115 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.316992044 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.316997051 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.382808924 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.383260012 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.383338928 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.383409977 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.383424997 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.383454084 CET	49915	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.383460045 CET	443	49915	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.386933088 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.386974096 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.387085915 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.387257099 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.387270927 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.567182064 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.567719936 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.567756891 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.568344116 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.568357944 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.569991112 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.570390940 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.570550919 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.570606947 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.570630074 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.570642948 CET	49921	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.570648909 CET	443	49921	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.574155092 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.574189901 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.574410915 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.574604988 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.574620962 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.687201977 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.687865973 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.687896967 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.688823938 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.688827991 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.765319109 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.765966892 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.765996933 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.766521931 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.766529083 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.828049898 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.828135014 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.828293085 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.828552961 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.828576088 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.828591108 CET	49923	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.828597069 CET	443	49923	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.832529068 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.832577944 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.832775116 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.832911968 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.832927942 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.849873066 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.849947929 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.850018024 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.850265980 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.850284100 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.850297928 CET	49920	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.850302935 CET	443	49920	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.853610039 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.853653908 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.853965044 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.854012966 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.854024887 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.899950981 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.900628090 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.900654078 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.901187897 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.901194096 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.913847923 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.914429903 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.914554119 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.914555073 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.914555073 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.918652058 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.918699980 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.918797970 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.918986082 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.918998957 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.983412981 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.984112978 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.984174013 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.984210968 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.984253883 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.984285116 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.984302998 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.984327078 CET	49925	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.984335899 CET	443	49925	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.990916014 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.990978956 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:11.991166115 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.994941950 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:11.994986057 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.200910091 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.201546907 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.201589108 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.202164888 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.202172995 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.225279093 CET	49924	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.225317001 CET	443	49924	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.228853941 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.229432106 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.229507923 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.229978085 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.229994059 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.355331898 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.355417967 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.355482101 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.355731964 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.355750084 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.355763912 CET	49926	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.355770111 CET	443	49926	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.359570026 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.359606981 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.359702110 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.359860897 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.359879017 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.378617048 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.379174948 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.379210949 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.379720926 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.379731894 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.444850922 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.444935083 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.445111990 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.445344925 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.445369959 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.445382118 CET	49927	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.445389032 CET	443	49927	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.448908091 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.448949099 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.449050903 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.449232101 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.449245930 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.465456009 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.465545893 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.465627909 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.465886116 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.465905905 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.465919018 CET	49928	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.465924978 CET	443	49928	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.469046116 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.469091892 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.469182968 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.469341993 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.469358921 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.633610010 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.634150982 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.634200096 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.634207964 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.634268045 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.634298086 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.634315968 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.634329081 CET	49930	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.634335041 CET	443	49930	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.638240099 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.638264894 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.638328075 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.638494015 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.638504982 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.700584888 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.701257944 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.701297998 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.701809883 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.701821089 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.756268024 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.756833076 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.756863117 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.757384062 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.757399082 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.788924932 CET	49935	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.788975954 CET	443	49935	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.789079905 CET	49935	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.789242029 CET	49935	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.789252996 CET	443	49935	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.791018009 CET	49936	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.791059017 CET	443	49936	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.791384935 CET	49936	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.791642904 CET	49936	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.791656971 CET	443	49936	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.940901995 CET	443	49935	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.941768885 CET	49937	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.941816092 CET	443	49937	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.941926003 CET	49937	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.942122936 CET	49937	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.942138910 CET	443	49937	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.966002941 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.966027975 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.966093063 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.966093063 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.966150045 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.966430902 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.966449022 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.966466904 CET	49929	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.966473103 CET	443	49929	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.970434904 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.970480919 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.970837116 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.971046925 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:12.971065998 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:12.980957031 CET	443	49936	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.981600046 CET	49939	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.981653929 CET	443	49939	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:12.981735945 CET	49939	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.981920958 CET	49939	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:12.981931925 CET	443	49939	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:13.045258999 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.045845985 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.045871973 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.046413898 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.046418905 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.047060013 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.047493935 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.047540903 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.047543049 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.047590971 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.047665119 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.047665119 CET	49931	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.047683954 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.047697067 CET	443	49931	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.051477909 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.051516056 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.051944971 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.052062988 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.052069902 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.114496946 CET	443	49937	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:13.134509087 CET	443	49939	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:13.235004902 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.235622883 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.235651970 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.236195087 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.236201048 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.361402988 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.362111092 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.362152100 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.362709045 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.362720013 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.374316931 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.374686003 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.374759912 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.374805927 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.374821901 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.374830961 CET	49934	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.374836922 CET	443	49934	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.378653049 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.378699064 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.378793955 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.379034996 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.379049063 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.462471008 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.463083982 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.463123083 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.463654041 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.463660955 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.466579914 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.466979027 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.467014074 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.467375994 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.467381954 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.471209049 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.471281052 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.471359968 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.471541882 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.471563101 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.471573114 CET	49932	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.471580029 CET	443	49932	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.474977970 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.475023985 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.475167990 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.475328922 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.475347996 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.616683960 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.616714954 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.616790056 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.616800070 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.616857052 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.617084026 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.617101908 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.617116928 CET	49938	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.617122889 CET	443	49938	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.620872974 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.620917082 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.621054888 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.621251106 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.621262074 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.724777937 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.724817038 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.724873066 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.724911928 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.724972963 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.725193024 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.725222111 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.725231886 CET	49940	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.725238085 CET	443	49940	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.729062080 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.729110003 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.729249001 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.729396105 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.729413986 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.730030060 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.730072021 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.730130911 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.730154037 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.730242968 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.730397940 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.730408907 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.730417967 CET	49933	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.730422020 CET	443	49933	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.733515978 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.733565092 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.733638048 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.733792067 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.733813047 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.802098036 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.804258108 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.804286003 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.804759979 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.804764986 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.861944914 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.862814903 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.862855911 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:13.863306999 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:13.863317966 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.010313034 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.013890982 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.013914108 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.014400005 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.014405012 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.088584900 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.089270115 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.089328051 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.089363098 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.089406967 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.089483023 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.089504957 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.089524031 CET	49941	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.089531898 CET	443	49941	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.093199968 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.093240023 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.093367100 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.093533039 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.093545914 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.121970892 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.122045994 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.122348070 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.122400045 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.122422934 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.122437000 CET	49942	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.122442961 CET	443	49942	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.125940084 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.125993013 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.126070976 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.126245022 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.126264095 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.292243004 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:14.379386902 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.380009890 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.380047083 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.380650043 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.380656004 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.412101984 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.412168980 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.412247896 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.412463903 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.412482023 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.412508965 CET	49943	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.412513971 CET	443	49943	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.415518999 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.415560007 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.415647030 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.415823936 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.415839911 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.456208944 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.456804991 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.456828117 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.457463026 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.457468987 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.472507000 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:14.631479979 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.631577969 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.631659031 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.631974936 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.631994009 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.632004976 CET	49944	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.632010937 CET	443	49944	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.649188995 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.649240017 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.649324894 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.649497032 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.649511099 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.709633112 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.756201029 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.756221056 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.756385088 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.756397963 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.756405115 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.756653070 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.756697893 CET	443	49946	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.756747961 CET	49946	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.759644032 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.759675980 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.759743929 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.759912968 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.759922028 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.808120012 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.808693886 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.808741093 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.809437990 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.809453011 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.914036036 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.914716005 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.914755106 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:14.915359020 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:14.915364981 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.015300989 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.015893936 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.015916109 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.016515017 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.016520977 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.166343927 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.166980982 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.167006969 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.167561054 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.167567968 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.217922926 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.217951059 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.218000889 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.218023062 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.218054056 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.218368053 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.218368053 CET	49947	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.218385935 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.218395948 CET	443	49947	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.222219944 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.222254992 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.222336054 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.222493887 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.222506046 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.255567074 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.255599022 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.255657911 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.255661964 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.255759954 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.256020069 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.256041050 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.256053925 CET	49949	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.256061077 CET	443	49949	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.259891987 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.259942055 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.260072947 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.260260105 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.260277987 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.350347042 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.351036072 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.351068020 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.351648092 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.351655960 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.354967117 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.355448008 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.355518103 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.355561972 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.355561972 CET	49948	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.355582952 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.355593920 CET	443	49948	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.358917952 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.358962059 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.359035969 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.359375954 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.359390974 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.427179098 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.427220106 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.427275896 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.427275896 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.427325010 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.427562952 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.427593946 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.427613020 CET	49945	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.427619934 CET	443	49945	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.430882931 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.430927992 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.431247950 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.431421041 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.431438923 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.552342892 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.552429914 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.552491903 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.552762985 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.552762985 CET	49950	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.552783012 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.552793026 CET	443	49950	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.555850983 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.555903912 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.556225061 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.556401968 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.556420088 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.632436037 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.633119106 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.633153915 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.633817911 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.633830070 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.705622911 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.706216097 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.706248045 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.706687927 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.706692934 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.814244032 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.814807892 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.814858913 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.815356970 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.815371037 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.908143044 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.908221960 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.908327103 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.908497095 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.908518076 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.908549070 CET	49951	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.908555031 CET	443	49951	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.911451101 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.911503077 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.911586046 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.911842108 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.911859989 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.947896004 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.959326029 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.960064888 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.960113049 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.960619926 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.960628033 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.997277021 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.997308969 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.997468948 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.997468948 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:15.997489929 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.998061895 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.998095989 CET	443	49952	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:15.998192072 CET	49952	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.000396967 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.000443935 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.000536919 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.000700951 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.000716925 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.075839996 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.075938940 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.076018095 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.076287985 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.076323032 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.076347113 CET	49954	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.076354027 CET	443	49954	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.079888105 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.079931974 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.080004930 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.080173016 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.080189943 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.228570938 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.283202887 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.283241034 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.283436060 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.283456087 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.283466101 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.283763885 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.283803940 CET	443	49955	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.283857107 CET	49955	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.286515951 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.286560059 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.286652088 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.286875963 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.286891937 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.300283909 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.300865889 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.300898075 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.301369905 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.301376104 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.331706047 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.332288027 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.332324982 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.332824945 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.332833052 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.473524094 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.503465891 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.503508091 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.503930092 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.503936052 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.552572966 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.556906939 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.556938887 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.556997061 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.557115078 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.565191031 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.565234900 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.565316916 CET	49957	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.565327883 CET	443	49957	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.580833912 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.580892086 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.581069946 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.581235886 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.581250906 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.603220940 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.603260040 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.603820086 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.603837013 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.603847027 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.604094982 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.604134083 CET	443	49956	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.604197979 CET	49956	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.609755039 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.609819889 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.609896898 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.610066891 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.610080004 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.644892931 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.645876884 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.645927906 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.646729946 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.646754980 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.781774044 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.781843901 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.781924009 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.785922050 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.785948038 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.785960913 CET	49958	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.785968065 CET	443	49958	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.789630890 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.789684057 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.789758921 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.793384075 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.793401957 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.802155018 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.802649975 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.802686930 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.803137064 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.803148031 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.878731966 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.879779100 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.879839897 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.879862070 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.879923105 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.880734921 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.880760908 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.880776882 CET	49959	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.880784035 CET	443	49959	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.883656979 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.883707047 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.883912086 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.884171009 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.884187937 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.935446978 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.935806990 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.935820103 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.936270952 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.936278105 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.996884108 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:16.999515057 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:16.999561071 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.000471115 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.000484943 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.064243078 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.079111099 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.079292059 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.079974890 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.079974890 CET	49953	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.079997063 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.080007076 CET	443	49953	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.083584070 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.083631039 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.083718061 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.084381104 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.084398031 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.156446934 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.159533024 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.159579992 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.161978960 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.161984921 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.174555063 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.174639940 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.174705982 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.175493956 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.175513029 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.175525904 CET	49962	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.175532103 CET	443	49962	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.199054956 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.199109077 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.199184895 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.199361086 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.199372053 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.257236958 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.257270098 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.257327080 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.257328033 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.257405996 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.257810116 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.257823944 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.257843018 CET	49963	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.257848978 CET	443	49963	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.260930061 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.260958910 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.261030912 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.261297941 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.261320114 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.299767017 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.300266027 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.300322056 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.300712109 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.300719023 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.364612103 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.364943027 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.365149021 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.365149021 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.365380049 CET	49964	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.365396976 CET	443	49964	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.368139982 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.368179083 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.368377924 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.368556023 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.368571043 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.412940025 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.413431883 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.413480997 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.413924932 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.413930893 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.513381958 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.513927937 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.513957977 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.514533043 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.514539957 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.566232920 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.566272020 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.566361904 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.566400051 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.566452980 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.566986084 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.567008018 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.567019939 CET	49965	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.567025900 CET	443	49965	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.570287943 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.570329905 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.570430994 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.570570946 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.570590019 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.623905897 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.623929977 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.623989105 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.624015093 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.624054909 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.624228954 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.624249935 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.624263048 CET	49966	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.624269009 CET	443	49966	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.627007008 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.627055883 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.627170086 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.627320051 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.627336025 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.629359007 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.629780054 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.629796028 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.630173922 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.630188942 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.718564034 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.718597889 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.718646049 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.718688011 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.718735933 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.718938112 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.718954086 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.718986988 CET	49967	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.718991995 CET	443	49967	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.721955061 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.721997976 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.722081900 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.722513914 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.722533941 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.746360064 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.746891975 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.746927023 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.747374058 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.747379065 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.854013920 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.854363918 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.854470015 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.854497910 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.854497910 CET	49968	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.854522943 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.854535103 CET	443	49968	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.857592106 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.857644081 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.857841969 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.858001947 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.858012915 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.900928020 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.901411057 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.901442051 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:17.901911974 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:17.901921034 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.008100986 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.008133888 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.008193016 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.008218050 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.008259058 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.008460999 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.008481026 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.008491993 CET	49969	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.008497953 CET	443	49969	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.011647940 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.011696100 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.012485981 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.012650967 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.012664080 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.032542944 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.033086061 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.033118010 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.033621073 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.033627987 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.127105951 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.127567053 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.127603054 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.128040075 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.128051043 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.388948917 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.389605999 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.389672995 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.389720917 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.389739990 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.389753103 CET	49974	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.389760017 CET	443	49974	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.392550945 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.392591000 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.392859936 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.393033028 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.393047094 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.475789070 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.475903988 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.475975990 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.476191044 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.476207018 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.476234913 CET	49970	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.476242065 CET	443	49970	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.479156971 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.479204893 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.479285955 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.479415894 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.479428053 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.768800020 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.769161940 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.769392967 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.769426107 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.769576073 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.769608021 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.769948959 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.769958973 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.770030022 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.770044088 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.852530003 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.852983952 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.853028059 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.853483915 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.853493929 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.870343924 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.870381117 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.870435953 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.870449066 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.870488882 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.870665073 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.870687962 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.870702982 CET	49971	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.870708942 CET	443	49971	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.873387098 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.873433113 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:18.873514891 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.873667002 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:18.873680115 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.011866093 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.011970043 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.012057066 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.012092113 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.012196064 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.012248039 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.012341022 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.012378931 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.012403965 CET	49980	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.012418985 CET	443	49980	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.015613079 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.015650034 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.015803099 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.015969038 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.015985012 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.050883055 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.050966978 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.051208973 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.051240921 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.051240921 CET	49977	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.051260948 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.051270962 CET	443	49977	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.054229975 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.054281950 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.054351091 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.054508924 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.054523945 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.103040934 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.103451014 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.103557110 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.103694916 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.103724003 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.103734970 CET	49981	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.103741884 CET	443	49981	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.106736898 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.106790066 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.106857061 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.107018948 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.107032061 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.206710100 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.207304001 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.207336903 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.207808971 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.207813978 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.325073004 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.333133936 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.333173990 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.333832026 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.333847046 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.379859924 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.380342960 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.380366087 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.380878925 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.380883932 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.425461054 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.425982952 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.426013947 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.426424026 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.426429987 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.449090958 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.449170113 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.449278116 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.449454069 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.449475050 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.449484110 CET	49982	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.449491024 CET	443	49982	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.452578068 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.452624083 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.452699900 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.452831030 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.452841997 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.480201960 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.480732918 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.480768919 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.481256962 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.481262922 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.576004982 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.589659929 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.589730978 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.589889050 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.593553066 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.593595982 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.593642950 CET	49975	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.593650103 CET	443	49975	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.608630896 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.608685970 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.608814955 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.608980894 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.608995914 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.635021925 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.635098934 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.635180950 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.635204077 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.635226011 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.635277033 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.635426998 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.635441065 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.635451078 CET	49983	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.635457039 CET	443	49983	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.638154030 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.638179064 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.638395071 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.638545990 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.638560057 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.675796986 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.675882101 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.675967932 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.676263094 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.676282883 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.676294088 CET	49984	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.676300049 CET	443	49984	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.679907084 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.679945946 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.680028915 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.680198908 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.680212021 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.752082109 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.752285004 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.752355099 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.752468109 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.752486944 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.752502918 CET	49985	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.752509117 CET	443	49985	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.755691051 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.755731106 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.755805016 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.755948067 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.755960941 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.847306013 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.847860098 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.847892046 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:19.848396063 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:19.848403931 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.001092911 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.001701117 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.001744986 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.002243996 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.002259016 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.020620108 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.021085024 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.021116972 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.021534920 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.021542072 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.059497118 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.060026884 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.060059071 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.060583115 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.060587883 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.102431059 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.102979898 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.103017092 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.103517056 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.103523970 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.112474918 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.114933968 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.114991903 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.115032911 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.115101099 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.115139008 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.115154028 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.115165949 CET	49987	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.115175009 CET	443	49987	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.118123055 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.118164062 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.118309021 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.118448019 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.118458986 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.262228012 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.262310982 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.262391090 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.262646914 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.262675047 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.262692928 CET	49988	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.262701988 CET	443	49988	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.267467022 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.267503023 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.267625093 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.267818928 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.267829895 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.283396959 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.283736944 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.283786058 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.283821106 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.283890009 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.283926010 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.283941984 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.283967018 CET	49989	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.283972979 CET	443	49989	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.287036896 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.287081003 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.287333012 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.287333965 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.287369967 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.292572021 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.292980909 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.293040991 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.293076992 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.293092012 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.293104887 CET	49991	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.293109894 CET	443	49991	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.295584917 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.295597076 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.295645952 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.295797110 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.295808077 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.302308083 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.302767992 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.302826881 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.302862883 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.302874088 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.302885056 CET	49990	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.302890062 CET	443	49990	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.305468082 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.305490971 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.305783987 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.305931091 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.305938959 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.430152893 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.430639982 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.430664062 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.431293964 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.431303024 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.657697916 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.657736063 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.657795906 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.657803059 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.657851934 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.658061028 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.658082962 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.658097982 CET	49992	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.658104897 CET	443	49992	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.661401987 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.661442041 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.661571980 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.661691904 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.661700010 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.676142931 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.678263903 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.678287029 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.678766012 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.678774118 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.686938047 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.687403917 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.687438965 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.687839031 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.687846899 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.920692921 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.920777082 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.920965910 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.921050072 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.921073914 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.921087980 CET	49997	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.921093941 CET	443	49997	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.923899889 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.923942089 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:20.924134970 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.924294949 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:20.924314976 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.086393118 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.086426020 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.086479902 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.086500883 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.086518049 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.086574078 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.086709976 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.086730003 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.086740017 CET	49996	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.086746931 CET	443	49996	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.087862968 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.088314056 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.088344097 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.088819981 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.088826895 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.089621067 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.089695930 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.089827061 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.089982033 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.090008020 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.191287041 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.191768885 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.191811085 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.192276955 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.192290068 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.297714949 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.298244953 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.298280954 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.298753023 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.298758984 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.363415003 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.363444090 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.363493919 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.363493919 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.363538027 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.363761902 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.363780022 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.363801003 CET	49998	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.363806963 CET	443	49998	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.366904020 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.366942883 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.367033005 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.367186069 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.367202044 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.399465084 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.399946928 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.400011063 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.400470018 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.400475979 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.543625116 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.543792963 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.543859005 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.543952942 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.543975115 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.543987989 CET	49999	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.543993950 CET	443	49999	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.546920061 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.546972036 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.547048092 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.547254086 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.547272921 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.578522921 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.578613997 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.578675032 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.578809977 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.578824043 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.578835011 CET	49993	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.578849077 CET	443	49993	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.581993103 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.582050085 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.582138062 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.582314968 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.582340002 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.658030987 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.659584999 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.659662008 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.659729958 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.659750938 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.659760952 CET	50000	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.659766912 CET	443	50000	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.662446022 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.662492990 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.662569046 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.662728071 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.662740946 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.672875881 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.673317909 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.673337936 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.673754930 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.673759937 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.907197952 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.920666933 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.920692921 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.921298981 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.921303988 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.938029051 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.938376904 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.938436985 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.938509941 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.938529015 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.938529968 CET	49994	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.938535929 CET	443	49994	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.941637039 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.941679955 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:21.941752911 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.941894054 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:21.941905022 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.032708883 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.033360004 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.033396959 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.033798933 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.033803940 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.109698057 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.109735012 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.109786034 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.109853983 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.109888077 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.111068010 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.111087084 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.111125946 CET	50004	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.111131907 CET	443	50004	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.119124889 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.119177103 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.119271040 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.119502068 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.119520903 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.220655918 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.221291065 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.221328020 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.221820116 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.221828938 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.270421028 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.271646023 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.271744013 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.271769047 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.271791935 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.271863937 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.271886110 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.271922112 CET	50006	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.271929026 CET	443	50006	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.275044918 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.275087118 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.275183916 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.275340080 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.275351048 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.342803001 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.343329906 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.343364000 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.343785048 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.343791962 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.498110056 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.498210907 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.498310089 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.498554945 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.498579025 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.498594999 CET	50002	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.498600006 CET	443	50002	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.501688957 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.501740932 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.502034903 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.502034903 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.502077103 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.511081934 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.511730909 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.511780024 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.512376070 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.512391090 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.527578115 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.528256893 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.528306007 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.528717995 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.528726101 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.599477053 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.599555016 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.600197077 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.600198030 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.600225925 CET	50008	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.600240946 CET	443	50008	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.603351116 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.603374004 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.603444099 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.603641987 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.603652954 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.656740904 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.657321930 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.657351971 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.657836914 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.657841921 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.763273001 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.763680935 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.763768911 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.763806105 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.763824940 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.763835907 CET	50005	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.763843060 CET	443	50005	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.766829967 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.766908884 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.766998053 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.767155886 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.767189026 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.842783928 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.843331099 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.843359947 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.843868971 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.843875885 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.883107901 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.883953094 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.884124041 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.884124041 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.884124041 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.887653112 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.887692928 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:22.887794018 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.887936115 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:22.887953997 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.065335989 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.065370083 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.065431118 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.065437078 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.065495968 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.065725088 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.065726042 CET	50009	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.065772057 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.065798998 CET	443	50009	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.068941116 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.068989038 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.069180965 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.069228888 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.069237947 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.093913078 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.094002962 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.094144106 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.094305992 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.094305992 CET	50011	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.094331980 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.094347954 CET	443	50011	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.097769976 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.097826958 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.098041058 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.098093987 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.098102093 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.166239977 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.166785955 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.166836977 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.167290926 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.167304039 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.194262981 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.194765091 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.194802999 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.195266962 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.195272923 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.196172953 CET	50010	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.196194887 CET	443	50010	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.382728100 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.383321047 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.383337975 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.383789062 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.383794069 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.396053076 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.396574974 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.396600008 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.396966934 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.396975994 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.397623062 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.398312092 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.398382902 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.398459911 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.398480892 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.398492098 CET	50014	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.398498058 CET	443	50014	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.401506901 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.401529074 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.401624918 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.401778936 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.401789904 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.413805962 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.414243937 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.414267063 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.414659977 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.414665937 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.573008060 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.573095083 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.573168039 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.573427916 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.573450089 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.573462009 CET	50015	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.573470116 CET	443	50015	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.576643944 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.576680899 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.576765060 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.576899052 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.576910019 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.617824078 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.617909908 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.617958069 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.618208885 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.618235111 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.618248940 CET	50016	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.618257046 CET	443	50016	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.621623039 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.621659040 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.621742964 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.621886969 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.621900082 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.652627945 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.653278112 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.653341055 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.653378963 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.653392076 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.653402090 CET	50012	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.653408051 CET	443	50012	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.663327932 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.663379908 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.663446903 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.663826942 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.663840055 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.733854055 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.733894110 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.733951092 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.733978987 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.733994007 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.734180927 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.734198093 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.734231949 CET	50013	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.734237909 CET	443	50013	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.737390041 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.737416983 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.737498999 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.737623930 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.737632990 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.844760895 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.845335960 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.845366001 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.845810890 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.845817089 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.921246052 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.921814919 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.921845913 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.922306061 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.922312021 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.926433086 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.926816940 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.926872015 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:23.927316904 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:23.927331924 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.022809982 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.023649931 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.023680925 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.024149895 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.024154902 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.070607901 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.071284056 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.071319103 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.071748018 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.071753025 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.079405069 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.080300093 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.080394983 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.080429077 CET	50017	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.080446959 CET	443	50017	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.083837986 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.083894968 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.083972931 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.084137917 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.084151030 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.127645016 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.128243923 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.128353119 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.128381968 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.128381968 CET	50020	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.128400087 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.128410101 CET	443	50020	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.131552935 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.131609917 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.131716967 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.131849051 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.131865978 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.141195059 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.141381979 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.141448021 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.141489983 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.141511917 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.141527891 CET	50019	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.141535044 CET	443	50019	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.144385099 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.144432068 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.144514084 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.144666910 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.144685030 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.262124062 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.262264013 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.262345076 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.262624979 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.262645006 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.262675047 CET	50021	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.262681007 CET	443	50021	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.265695095 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.265744925 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.265850067 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.265968084 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.265979052 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.417726994 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.418384075 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.418422937 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.418875933 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.418886900 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.444130898 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.444879055 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.444936037 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.444979906 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.445013046 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.445072889 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.445091963 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.445120096 CET	50022	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.445127964 CET	443	50022	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.449421883 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.452923059 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.452970028 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.453396082 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.453402042 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.454545021 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.454641104 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.454722881 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.454855919 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.454895020 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.467158079 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.467812061 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.467850924 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.468240023 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.468245983 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.630656958 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.630835056 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.630892038 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.631048918 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.631067991 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.631083965 CET	50023	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.631092072 CET	443	50023	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.634076118 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.634115934 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.634208918 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.634354115 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.634367943 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.649983883 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.650065899 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.650180101 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.650257111 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.650278091 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.650289059 CET	50025	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.650296926 CET	443	50025	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.652951956 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.652982950 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.653055906 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.653224945 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.653239012 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.661447048 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.661885977 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.661926031 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.662441969 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.662448883 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.854060888 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.854626894 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.854648113 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.855256081 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.855262041 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.886972904 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.889859915 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.889916897 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.889924049 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.889978886 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.890041113 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.890062094 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.890072107 CET	50026	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.890079021 CET	443	50026	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.893234015 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.893276930 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.893353939 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.893512011 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.893527031 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.900537014 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.900566101 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.900624037 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.900626898 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.900677919 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.900840998 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.900856972 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.900867939 CET	50024	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.900872946 CET	443	50024	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.903734922 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.903774977 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.903852940 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.903997898 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.904012918 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.925029993 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.925470114 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.925487995 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.925905943 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.925914049 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.993886948 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.994467020 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.994503021 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:24.994910955 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:24.994923115 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.110728979 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.111138105 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.111216068 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.111284018 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.111305952 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.111321926 CET	50027	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.111330032 CET	443	50027	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.114465952 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.114520073 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.114633083 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.114762068 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.114775896 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.127978086 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.128048897 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.128101110 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.128333092 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.128349066 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.128361940 CET	50028	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.128369093 CET	443	50028	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.131457090 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.131501913 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.131572962 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.131737947 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.131755114 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.205985069 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.206161976 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.206243992 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.206345081 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.206362009 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.206397057 CET	50029	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.206404924 CET	443	50029	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.209275961 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.209357977 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.209450960 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.209633112 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.209672928 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.232845068 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.233309984 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.233335018 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.233834028 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.233839035 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.240927935 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.241348028 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.241372108 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.241837978 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.241842985 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.438252926 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.439168930 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.439218998 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.439560890 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.439565897 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.465909004 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.465951920 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.466013908 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.466195107 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.466195107 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.466344118 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.466365099 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.466377974 CET	50031	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.466384888 CET	443	50031	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.469856977 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.469913960 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.470004082 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.470200062 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.470263004 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.470277071 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.470277071 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.470347881 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.470511913 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.470529079 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.470542908 CET	50032	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.470547915 CET	443	50032	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.473550081 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.473579884 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.473647118 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.473831892 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.473841906 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.499799013 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.500531912 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.500565052 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.500858068 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.500863075 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.602890968 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.603442907 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.603476048 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.603972912 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.603979111 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.632091999 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.632126093 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.632216930 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.632250071 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.632270098 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.632320881 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.632507086 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.632524967 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.632534981 CET	50034	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.632540941 CET	443	50034	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.635482073 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.635530949 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.635607004 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.635761976 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.635781050 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.755702972 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.755894899 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.756007910 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.756174088 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.756194115 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.756206036 CET	50033	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.756212950 CET	443	50033	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.759255886 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.759567022 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.759602070 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.759706020 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.759766102 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.759804964 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.759839058 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.759848118 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.760324001 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.760329008 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.948396921 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.949506044 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.949619055 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.949659109 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.949659109 CET	50039	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.949677944 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.949688911 CET	443	50039	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.952744961 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.952785969 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.952862024 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.953025103 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.953036070 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.983690023 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.983766079 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.983867884 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.984088898 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.984108925 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.984122038 CET	50035	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.984127998 CET	443	50035	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.987682104 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.987726927 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:25.987840891 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.987962961 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:25.987968922 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.104934931 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.105520010 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.105551958 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.105984926 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.105989933 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.243607998 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.244246960 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.244287014 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.244729996 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.244738102 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.473555088 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.473649025 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.473728895 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.473938942 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.473965883 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.473978043 CET	50038	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.473984957 CET	443	50038	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.476980925 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.477021933 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.477103949 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.477286100 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.477302074 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.519171000 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.519766092 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.519798040 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.520248890 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.520255089 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.783412933 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.783492088 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.783565044 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.784164906 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.784164906 CET	50040	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.784198046 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.784213066 CET	443	50040	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.801289082 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.801343918 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.801422119 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.801628113 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.801640987 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.882977009 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.883059978 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.883121967 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.883322001 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.883352041 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.883367062 CET	50041	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.883374929 CET	443	50041	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.907104015 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.907738924 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.907778978 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:26.908251047 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:26.908257008 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.184807062 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.227241993 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.227276087 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.227461100 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.227479935 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.227490902 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.227736950 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.227776051 CET	443	50043	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.227833986 CET	50043	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.326996088 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.327672005 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.327709913 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.328156948 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.328162909 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.493060112 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.493765116 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.493849039 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.494317055 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.494338989 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.588277102 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.589229107 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.589293003 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.589335918 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.589354038 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.589369059 CET	50044	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.589376926 CET	443	50044	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.689570904 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.690248966 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.690278053 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.690748930 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.690754890 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.753751993 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.753834009 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.753899097 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.753926039 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.753969908 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.754015923 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.754221916 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.754240036 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.754251957 CET	50042	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:27.754257917 CET	443	50042	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:27.974283934 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:28.027255058 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:28.027287006 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:28.027456045 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:28.027472019 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:28.027481079 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:28.027673960 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:28.027709007 CET	443	50045	13.107.246.72	192.168.2.17
Mar 20, 2025 15:06:28.027753115 CET	50045	443	192.168.2.17	13.107.246.72
Mar 20, 2025 15:06:29.474428892 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:29.474594116 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:32.068806887 CET	50050	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:32.068841934 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:32.068947077 CET	50050	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:32.069179058 CET	50050	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:32.069191933 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:32.275630951 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:32.276114941 CET	50050	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:32.276138067 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:42.341094971 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:42.341170073 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:42.341226101 CET	50050	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:43.138215065 CET	50050	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:06:43.138250113 CET	443	50050	142.250.65.164	192.168.2.17
Mar 20, 2025 15:06:43.138516903 CET	50054	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.138552904 CET	443	50054	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.138622999 CET	50054	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.138665915 CET	50055	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.138715029 CET	443	50055	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.138763905 CET	50055	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.138818979 CET	50054	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.138828993 CET	443	50054	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.138880968 CET	50055	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.138890982 CET	443	50055	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.297497988 CET	443	50054	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.298127890 CET	50056	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.298161030 CET	443	50056	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.298263073 CET	50056	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.298383951 CET	50056	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.298396111 CET	443	50056	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.330802917 CET	443	50055	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.331393003 CET	50057	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.331437111 CET	443	50057	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.331526041 CET	50057	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.331656933 CET	50057	443	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:43.331669092 CET	443	50057	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.477932930 CET	443	50056	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:43.511332989 CET	443	50057	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:44.653290987 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:06:44.653403997 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:59.487205029 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:06:59.677220106 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:07:01.374366999 CET	49708	443	192.168.2.17	40.126.24.83
Mar 20, 2025 15:07:01.518656969 CET	443	49708	40.126.24.83	192.168.2.17
Mar 20, 2025 15:07:01.518765926 CET	49708	443	192.168.2.17	40.126.24.83
Mar 20, 2025 15:07:14.789331913 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:07:14.789450884 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:07:29.971657991 CET	80	49723	142.202.190.19	192.168.2.17
Mar 20, 2025 15:07:29.971762896 CET	49723	80	192.168.2.17	142.202.190.19
Mar 20, 2025 15:07:32.132147074 CET	50061	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:07:32.132201910 CET	443	50061	142.250.65.164	192.168.2.17
Mar 20, 2025 15:07:32.132388115 CET	50061	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:07:32.132477045 CET	50061	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:07:32.132497072 CET	443	50061	142.250.65.164	192.168.2.17
Mar 20, 2025 15:07:32.712477922 CET	443	50061	142.250.65.164	192.168.2.17
Mar 20, 2025 15:07:32.712830067 CET	50061	443	192.168.2.17	142.250.65.164
Mar 20, 2025 15:07:32.712881088 CET	443	50061	142.250.65.164	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 15:05:27.376636982 CET	53	50160	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:27.470246077 CET	53	53762	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:28.730283976 CET	53	59918	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:32.003135920 CET	63771	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:05:32.003282070 CET	62899	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:05:32.105211020 CET	53	63771	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:32.132714987 CET	53	62899	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:45.627417088 CET	53	61930	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:52.333230019 CET	53	53439	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:53.512826920 CET	60167	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:05:53.512968063 CET	56591	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:05:53.634727001 CET	53	56591	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:53.647959948 CET	53	60167	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:53.660290003 CET	53	58014	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:54.510607958 CET	64223	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:05:54.510735035 CET	57755	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:05:54.615179062 CET	53	57755	1.1.1.1	192.168.2.17
Mar 20, 2025 15:05:54.644522905 CET	53	64223	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:04.426932096 CET	53	57698	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:26.967830896 CET	53	58010	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:27.305119991 CET	53	54127	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:30.606435061 CET	53	60305	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:42.753894091 CET	138	138	192.168.2.17	192.168.2.255
Mar 20, 2025 15:06:47.563568115 CET	52608	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:47.680577993 CET	53	52608	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:47.688266993 CET	52609	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:47.837712049 CET	53	52609	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:55.436460972 CET	65470	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:55.436619043 CET	60847	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:55.437153101 CET	55832	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:55.437153101 CET	53831	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:55.578509092 CET	53	53831	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:56.454612017 CET	61248	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:56.454788923 CET	58328	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:56.454931021 CET	51884	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:56.455076933 CET	61726	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:56.587889910 CET	53	61248	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:56.600059986 CET	53	58328	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:56.600157022 CET	53	51884	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:57.945687056 CET	53	56847	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:58.480916977 CET	64145	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:58.628858089 CET	53	64145	1.1.1.1	192.168.2.17
Mar 20, 2025 15:06:59.487309933 CET	64145	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:06:59.633413076 CET	53	64145	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:00.494324923 CET	64145	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:00.634270906 CET	53	64145	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:02.509362936 CET	64145	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:02.656100988 CET	53	64145	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:06.521351099 CET	64145	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:06.659065008 CET	53	64145	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:11.445202112 CET	58320	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:11.445350885 CET	55938	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:11.445760012 CET	52001	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:11.445887089 CET	61522	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:11.579989910 CET	53	52001	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:11.586473942 CET	53	58320	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:11.588149071 CET	53	55938	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:11.591095924 CET	53	61522	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:12.461714983 CET	53962	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:12.461904049 CET	63181	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:12.584867001 CET	53	53962	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:12.598406076 CET	53	63181	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:14.489808083 CET	50587	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:14.631321907 CET	53	50587	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:15.505105019 CET	50587	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:16.504272938 CET	50587	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:16.630583048 CET	53	50587	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:18.513329983 CET	50587	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:18.647422075 CET	53	50587	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:22.521423101 CET	50587	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:22.645210028 CET	53	50587	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:27.435285091 CET	62790	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:27.435391903 CET	60081	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:27.435851097 CET	50065	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:27.435915947 CET	61844	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:27.555835009 CET	53	60081	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:27.561882019 CET	53	62790	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:27.565334082 CET	53	61844	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:27.576440096 CET	53	50065	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:28.455611944 CET	49372	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:28.455774069 CET	55535	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:28.581551075 CET	53	49372	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:30.486109018 CET	59561	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:30.654022932 CET	53	59561	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:31.498264074 CET	59561	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:31.634449005 CET	53	59561	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:32.513246059 CET	59561	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:34.520204067 CET	59561	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:34.649236917 CET	53	59561	1.1.1.1	192.168.2.17
Mar 20, 2025 15:07:38.521183968 CET	59561	53	192.168.2.17	1.1.1.1
Mar 20, 2025 15:07:38.657547951 CET	53	59561	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 20, 2025 15:05:32.132811069 CET	192.168.2.17	1.1.1.1	c20a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 20, 2025 15:05:32.003135920 CET	192.168.2.17	1.1.1.1	0xb703	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:05:32.003282070 CET	192.168.2.17	1.1.1.1	0xcf53	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 20, 2025 15:05:53.512826920 CET	192.168.2.17	1.1.1.1	0x3e9c	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:05:53.512968063 CET	192.168.2.17	1.1.1.1	0x488a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Mar 20, 2025 15:05:54.510607958 CET	192.168.2.17	1.1.1.1	0x74a6	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:05:54.510735035 CET	192.168.2.17	1.1.1.1	0xa58	Standard query (0)	play.google.com	65	IN (0x0001)	false
Mar 20, 2025 15:06:47.563568115 CET	192.168.2.17	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Mar 20, 2025 15:06:47.688266993 CET	192.168.2.17	1.1.1.1	0x2	Standard query (0)	19.190.202.142.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Mar 20, 2025 15:06:55.436460972 CET	192.168.2.17	1.1.1.1	0xca95	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:55.436619043 CET	192.168.2.17	1.1.1.1	0x10ad	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:06:55.437153101 CET	192.168.2.17	1.1.1.1	0xf848	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:55.437153101 CET	192.168.2.17	1.1.1.1	0xaa09	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:06:56.454612017 CET	192.168.2.17	1.1.1.1	0x2df0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:56.454788923 CET	192.168.2.17	1.1.1.1	0x96da	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:06:56.454931021 CET	192.168.2.17	1.1.1.1	0x210a	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:56.455076933 CET	192.168.2.17	1.1.1.1	0x856b	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:06:58.480916977 CET	192.168.2.17	1.1.1.1	0xc046	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:59.487309933 CET	192.168.2.17	1.1.1.1	0xc046	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:00.494324923 CET	192.168.2.17	1.1.1.1	0xc046	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:02.509362936 CET	192.168.2.17	1.1.1.1	0xc046	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:06.521351099 CET	192.168.2.17	1.1.1.1	0xc046	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:11.445202112 CET	192.168.2.17	1.1.1.1	0xdc5e	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:11.445350885 CET	192.168.2.17	1.1.1.1	0x450c	Standard query (0)	beacons.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:07:11.445760012 CET	192.168.2.17	1.1.1.1	0x6f4c	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:11.445887089 CET	192.168.2.17	1.1.1.1	0xfaca	Standard query (0)	beacons.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:07:12.461714983 CET	192.168.2.17	1.1.1.1	0xd3a0	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:12.461904049 CET	192.168.2.17	1.1.1.1	0x2827	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:14.489808083 CET	192.168.2.17	1.1.1.1	0xa5c7	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:15.505105019 CET	192.168.2.17	1.1.1.1	0xa5c7	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:16.504272938 CET	192.168.2.17	1.1.1.1	0xa5c7	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:18.513329983 CET	192.168.2.17	1.1.1.1	0xa5c7	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:22.521423101 CET	192.168.2.17	1.1.1.1	0xa5c7	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:27.435285091 CET	192.168.2.17	1.1.1.1	0x8588	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:27.435391903 CET	192.168.2.17	1.1.1.1	0x1fe2	Standard query (0)	beacons2.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:07:27.435851097 CET	192.168.2.17	1.1.1.1	0x767	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:27.435915947 CET	192.168.2.17	1.1.1.1	0x2055	Standard query (0)	beacons2.gvt2.com	65	IN (0x0001)	false
Mar 20, 2025 15:07:28.455611944 CET	192.168.2.17	1.1.1.1	0x202d	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:28.455774069 CET	192.168.2.17	1.1.1.1	0x50af	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:30.486109018 CET	192.168.2.17	1.1.1.1	0xc880	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:31.498264074 CET	192.168.2.17	1.1.1.1	0xc880	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:32.513246059 CET	192.168.2.17	1.1.1.1	0xc880	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:34.520204067 CET	192.168.2.17	1.1.1.1	0xc880	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:38.521183968 CET	192.168.2.17	1.1.1.1	0xc880	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 20, 2025 15:05:32.105211020 CET	1.1.1.1	192.168.2.17	0xb703	No error (0)	www.google.com		142.250.65.164	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:05:32.132714987 CET	1.1.1.1	192.168.2.17	0xcf53	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 20, 2025 15:05:53.634727001 CET	1.1.1.1	192.168.2.17	0x488a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:05:53.647959948 CET	1.1.1.1	192.168.2.17	0x3e9c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:05:53.647959948 CET	1.1.1.1	192.168.2.17	0x3e9c	No error (0)	plus.l.google.com		142.250.80.78	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:05:54.644522905 CET	1.1.1.1	192.168.2.17	0x74a6	No error (0)	play.google.com		142.250.64.110	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:47.680577993 CET	1.1.1.1	192.168.2.17	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Mar 20, 2025 15:06:47.837712049 CET	1.1.1.1	192.168.2.17	0x2	No error (0)	19.190.202.142.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Mar 20, 2025 15:06:55.578509092 CET	1.1.1.1	192.168.2.17	0xaa09	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:06:56.587889910 CET	1.1.1.1	192.168.2.17	0x2df0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:06:56.587889910 CET	1.1.1.1	192.168.2.17	0x2df0	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.116.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:56.600059986 CET	1.1.1.1	192.168.2.17	0x96da	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:06:56.600157022 CET	1.1.1.1	192.168.2.17	0x210a	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:06:56.600157022 CET	1.1.1.1	192.168.2.17	0x210a	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.113.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:58.628858089 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:06:58.628858089 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:06:59.633413076 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:06:59.633413076 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:00.634270906 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:07:00.634270906 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:02.656100988 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:07:02.656100988 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:06.659065008 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:07:06.659065008 CET	1.1.1.1	192.168.2.17	0xc046	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:11.579989910 CET	1.1.1.1	192.168.2.17	0x6f4c	No error (0)	beacons.gvt2.com		142.250.114.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:11.586473942 CET	1.1.1.1	192.168.2.17	0xdc5e	No error (0)	beacons.gvt2.com	beacons6.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:07:11.586473942 CET	1.1.1.1	192.168.2.17	0xdc5e	No error (0)	beacons6.gvt2.com		142.250.81.227	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:12.584867001 CET	1.1.1.1	192.168.2.17	0xd3a0	No error (0)	beacons.gvt2.com	beacons6.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:07:12.584867001 CET	1.1.1.1	192.168.2.17	0xd3a0	No error (0)	beacons6.gvt2.com		142.251.35.163	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:12.598406076 CET	1.1.1.1	192.168.2.17	0x2827	No error (0)	beacons.gvt2.com	beacons6.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 20, 2025 15:07:12.598406076 CET	1.1.1.1	192.168.2.17	0x2827	No error (0)	beacons6.gvt2.com		142.250.81.227	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:14.631321907 CET	1.1.1.1	192.168.2.17	0xa5c7	No error (0)	beacons.gvt2.com		142.250.75.99	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:16.630583048 CET	1.1.1.1	192.168.2.17	0xa5c7	No error (0)	beacons.gvt2.com		142.250.75.99	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:18.647422075 CET	1.1.1.1	192.168.2.17	0xa5c7	No error (0)	beacons.gvt2.com		142.250.75.99	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:22.645210028 CET	1.1.1.1	192.168.2.17	0xa5c7	No error (0)	beacons.gvt2.com		142.250.75.99	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:27.561882019 CET	1.1.1.1	192.168.2.17	0x8588	No error (0)	beacons2.gvt2.com		142.250.69.131	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:27.576440096 CET	1.1.1.1	192.168.2.17	0x767	No error (0)	beacons2.gvt2.com		173.194.64.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:28.581551075 CET	1.1.1.1	192.168.2.17	0x202d	No error (0)	beacons2.gvt2.com		74.125.205.94	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:30.654022932 CET	1.1.1.1	192.168.2.17	0xc880	No error (0)	beacons2.gvt2.com		142.251.40.163	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:31.634449005 CET	1.1.1.1	192.168.2.17	0xc880	No error (0)	beacons2.gvt2.com		142.251.40.163	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:34.649236917 CET	1.1.1.1	192.168.2.17	0xc880	No error (0)	beacons2.gvt2.com		142.251.40.163	A (IP address)	IN (0x0001)	false
Mar 20, 2025 15:07:38.657547951 CET	1.1.1.1	192.168.2.17	0xc880	No error (0)	beacons2.gvt2.com		142.251.40.163	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.svc.static.microsoft

www.google.com

142.202.190.19

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49723	142.202.190.19	80	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 15:05:28.832499027 CET	429	OUT	GET / HTTP/1.1 Host: 142.202.190.19 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 15:05:29.022066116 CET	322	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 20 Mar 2025 14:05:28 GMT Content-Length: 162 Data Raw: 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 70 6f 6c 6c 69 6e 61 74 65 20 63 6c 69 65 6e 74 2e 20 20 27 73 75 64 6f 20 61 70 74 2d 67 65 74 20 69 6e 73 74 61 6c 6c 20 70 6f 6c 6c 69 6e 61 74 65 27 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 20 66 72 6f 6d 3a 20 68 74 74 70 73 3a 2f 2f 62 61 7a 61 61 72 2e 6c 61 75 6e 63 68 70 61 64 2e 6e 65 74 2f 7e 70 6f 6c 6c 69 6e 61 74 65 2f 70 6f 6c 6c 69 6e 61 74 65 2f 74 72 75 6e 6b 2f 76 69 65 77 2f 68 65 61 64 3a 2f 70 6f 6c 6c 69 6e 61 74 65 0a Data Ascii: Please use the pollinate client. 'sudo apt-get install pollinate' or download from: https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate
Mar 20, 2025 15:05:29.096971035 CET	372	OUT	GET /favicon.ico HTTP/1.1 Host: 142.202.190.19 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://142.202.190.19/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 20, 2025 15:05:29.280015945 CET	322	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 20 Mar 2025 14:05:29 GMT Content-Length: 162 Data Raw: 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 70 6f 6c 6c 69 6e 61 74 65 20 63 6c 69 65 6e 74 2e 20 20 27 73 75 64 6f 20 61 70 74 2d 67 65 74 20 69 6e 73 74 61 6c 6c 20 70 6f 6c 6c 69 6e 61 74 65 27 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 20 66 72 6f 6d 3a 20 68 74 74 70 73 3a 2f 2f 62 61 7a 61 61 72 2e 6c 61 75 6e 63 68 70 61 64 2e 6e 65 74 2f 7e 70 6f 6c 6c 69 6e 61 74 65 2f 70 6f 6c 6c 69 6e 61 74 65 2f 74 72 75 6e 6b 2f 76 69 65 77 2f 68 65 61 64 3a 2f 70 6f 6c 6c 69 6e 61 74 65 0a Data Ascii: Please use the pollinate client. 'sudo apt-get install pollinate' or download from: https://bazaar.launchpad.net/~pollinate/pollinate/trunk/view/head:/pollinate
Mar 20, 2025 15:06:14.292243004 CET	6	OUT	Data Raw: 00 Data Ascii:
Mar 20, 2025 15:06:59.487205029 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.17	49737	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:48 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:48 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 19 Mar 2025 16:10:57 GMT ETag: "0x8DD6700A2498560" x-ms-request-id: 5cbf31d2-401e-0016-2cfc-9853e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140548Z-186895dd8bdbfcjthC1EWR3g000000000fr000000000dqch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:48 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2025-03-20 14:05:48 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.17	49738	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:49 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:49 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:49 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: bb85e804-d01e-0028-68be-987896000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140549Z-186895dd8bd48sshhC1EWRwmxg0000000gpg000000002hfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.17	49741	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:49 UTC	199	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f991acef-d01e-0082-25db-98e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140549Z-186895dd8bdbgz5hhC1EWR2wnc0000000bf0000000007dq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.17	49742	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:49 UTC	199	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: f281ec8c-d01e-0014-461c-99ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140549Z-186895dd8bdmf545hC1EWRky1s0000000hd000000000kwq0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.17	49739	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:49 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4ac19812-301e-005d-33c8-98e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140550Z-186895dd8bdpn7zfhC1EWR5w3w0000000e0000000000dgnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.17	49743	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:50 UTC	199	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 2cc1f298-801e-0067-6549-99fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140550Z-186895dd8bdkwn8shC1EWRkk180000000f0g000000001fz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.17	49745	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:50 UTC	199	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:50 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:50 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 9aaae0c2-f01e-00aa-0afd-988521000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140550Z-186895dd8bdkwn8shC1EWRkk180000000evg00000000fmhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:50 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.17	49746	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:50 UTC	199	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 7e231dec-e01e-0052-4cfc-98d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140550Z-186895dd8bdjz8r9hC1EWR3n3n0000000dtg00000000kcmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.17	49740	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:50 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:50 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:50 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: 7e231d3d-e01e-0052-35fc-98d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140550Z-186895dd8bdqzr24hC1EWRscdn0000000by000000000cd64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:50 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.17	49747	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:50 UTC	199	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: c4b62858-e01e-003c-44d4-98c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bd5zpn7hC1EWRryhc0000000f60000000005904 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.17	49748	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:50 UTC	199	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 80f3d67b-501e-00a3-13c8-98c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bd5zpn7hC1EWRryhc0000000f3g00000000d12k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.17	49749	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 2cb2adbf-c01e-008e-2fd6-987381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bd2r62ghC1EWRf0v00000000er0000000007m1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49751	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	501	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:05:51 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9yWm9Ec0sEEGkFNQNva7Cg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:51 UTC	922	IN	Data Raw: 33 39 33 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 67 65 6e 65 72 61 6c 20 68 6f 73 70 69 74 61 6c 20 68 6f 73 70 69 74 61 6c 20 73 70 6f 69 6c 65 72 73 22 2c 22 70 67 61 20 74 6f 75 72 20 76 61 6c 73 70 61 72 20 63 68 61 6d 70 69 6f 6e 73 68 69 70 20 67 6f 6c 66 20 70 69 63 6b 73 22 2c 22 6e 65 77 20 6d 65 78 69 63 6f 20 64 75 73 74 20 73 74 6f 72 6d 73 22 2c 22 73 6f 75 74 68 77 65 73 74 20 61 69 72 6c 69 6e 65 73 20 66 61 72 65 20 63 68 61 6e 67 65 73 22 2c 22 6e 61 73 61 20 61 73 74 72 6f 6e 61 75 74 73 20 72 65 74 75 72 6e 22 2c 22 70 6f 6b 65 6d 6f 6e 20 67 6f 20 64 65 65 70 20 64 65 70 74 68 73 20 72 65 73 65 61 72 63 68 20 74 61 73 6b 73 22 2c 22 68 6f 75 73 74 6f 6e 20 61 73 74 72 6f 73 20 63 69 74 79 20 63 6f 6e 6e 65 63 74 20 75 6e 69 66 6f 72 6d Data Ascii: 393)]}'["",["general hospital hospital spoilers","pga tour valspar championship golf picks","new mexico dust storms","southwest airlines fare changes","nasa astronauts return","pokemon go deep depths research tasks","houston astros city connect uniform
2025-03-20 14:05:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.17	49744	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6bc08573-401e-0078-05fc-984d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bdbfcjthC1EWR3g000000000fq000000000fgun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49754	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	359	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:05:51 UTC	1055	IN	HTTP/1.1 200 OK Version: 737894419 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 20 Mar 2025 14:05:51 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:51 UTC	165	IN	Data Raw: 66 64 36 0d 0a 29 5d 7d 27 0a 7b 22 64 64 6c 6a 73 6f 6e 22 3a 7b 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 61 6c 74 5f 74 65 78 74 22 3a 22 4d 65 6e 5c 75 30 30 32 37 73 20 43 6f 6c 6c 65 67 65 20 42 61 73 6b 65 74 62 61 6c 6c 20 54 6f 75 72 6e 61 6d 65 6e 74 20 46 69 72 73 74 20 52 6f 75 6e 64 20 32 30 32 35 22 2c 22 64 61 72 6b 5f 64 61 74 61 5f 75 72 69 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 Data Ascii: fd6)]}'{"ddljson":{"accessibility_description":"","alt_text":"Men\u0027s College Basketball Tournament First Round 2025","dark_data_uri":"data:image/png;base64,iV
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 64 73 41 41 41 44 58 43 41 4d 41 41 41 42 6c 45 51 76 4a 41 41 41 42 69 56 42 4d 56 45 56 48 63 45 7a 50 6a 6c 37 65 68 43 7a 33 63 68 33 6c 64 43 33 68 67 53 72 43 69 47 72 32 66 53 44 34 69 43 4c 35 6d 43 6a 6a 6a 6a 48 75 5a 68 7a 66 76 59 6e 62 75 34 32 37 6c 6f 75 71 64 58 57 6e 63 34 53 72 67 48 36 7a 65 6e 6d 71 62 33 69 34 68 34 48 44 6c 49 6d 75 69 70 4f 6f 6b 6e 37 47 70 59 2b 33 71 4b 2b 6f 59 6e 57 64 58 6e 69 70 63 6f 57 6c 64 33 76 50 6e 49 61 2f 6e 70 79 6f 61 6f 43 69 61 6e 32 57 64 32 54 4d 6a 33 37 50 70 6f 37 38 70 69 36 56 55 6a 2b 7a 61 44 48 2b 73 44 50 2b 75 54 54 39 76 54 33 2f 79 7a 65 57 67 6e 57 69 64 59 75 68 63 6f 4b 76 67 6f 37 53 74 49 33 56 6f 6a 36 44 51 Data Ascii: BORw0KGgoAAAANSUhEUgAAAdsAAADXCAMAAABlEQvJAAABiVBMVEVHcEzPjl7ehCz3ch3ldC3hgSrCiGr2fSD4iCL5mCjjjjHuZhzfvYnbu427louqdXWnc4SrgH6zenmqb3i4h4HDlImuipOokn7GpY+3qK+oYnWdXnipcoWld3vPnIa/npyoaoCian2Wd2TMj37Ppo78pi6VUj+zaDH+sDP+uTT9vT3/yzeWgnWidYuhcoKvgo7StI3Voj6DQ
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 47 52 38 2b 61 62 70 6d 33 61 53 64 4d 30 6e 7a 54 4e 38 57 54 53 64 4d 32 6e 48 32 50 38 2f 4e 47 2f 38 58 75 6c 4c 2b 4a 6b 65 6e 4a 79 63 6e 52 30 64 45 6a 70 7a 31 58 39 2b 37 68 37 33 36 64 56 62 6c 55 56 39 6e 75 46 38 55 46 4e 37 2f 38 6b 72 35 56 7a 39 41 7a 42 68 36 68 79 33 76 76 59 64 71 64 4e 31 77 48 61 6f 44 72 52 6b 75 4a 30 4e 70 6c 30 6e 2f 34 6a 51 64 36 53 53 76 51 6b 43 56 59 31 6e 57 71 6c 6b 38 7a 78 49 2b 70 2f 35 53 65 30 6d 52 34 4c 64 6e 2f 6a 53 6e 76 79 38 75 58 54 4a 79 2f 30 78 74 37 62 6b 37 64 49 44 7a 52 55 58 59 58 32 45 55 38 39 65 2f 61 59 39 58 2f 6a 36 63 39 63 7a 4a 35 79 77 59 54 61 75 74 61 33 74 41 33 6d 72 47 73 6d 57 6f 41 37 45 32 7a 48 79 57 66 4d 46 49 47 65 64 33 2f 35 62 56 31 4a 5a 51 70 67 70 61 52 68 71 Data Ascii: GR8+abpm3aSdM0nzTN8WTSdM2nH2P8/NG/8XulL+JkenJycnR0dEjpz1X9+7h736dVblUV9nuF8UFN7/8kr5Vz9AzBh6hy3vvYdqdN1wHaoDrRkuJ0Npl0n/4jQd6SSvQkCVY1nWqlk8zxI+p/5Se0mR4Ldn/jSnvy8uXTJy/0xt7bk7dIDzRUXYX2EU89e/aY9X/j6c9czJ5ywYTauta3tA3mrGsmWoA7E2zHyWfMFIGed3/5bV1JZQpgpaRhq
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 41 78 41 2b 7a 4e 50 49 52 49 52 30 38 6e 70 65 54 54 4f 31 70 59 6b 57 4d 6a 75 38 63 65 38 54 47 39 67 76 58 4e 41 42 42 73 77 7a 69 66 6e 67 70 35 68 70 33 6b 55 4b 52 75 36 63 54 34 37 67 33 63 32 4d 34 5a 5a 6a 4f 70 30 6f 61 6d 34 37 6e 66 74 74 31 56 46 63 6c 30 53 7a 52 4b 6d 35 49 53 65 57 4a 4a 68 41 4d 7a 43 38 61 73 36 39 77 76 57 6f 71 74 4d 65 2b 62 75 4f 71 57 4c 45 6f 78 38 72 51 4d 64 54 73 44 4b 38 35 55 51 59 46 4f 57 72 4e 58 45 4f 55 2b 4d 30 59 47 30 77 66 53 38 74 52 47 32 4b 71 37 44 37 41 69 79 34 48 74 34 6e 35 39 75 5a 41 6d 70 48 54 35 36 6b 79 6c 63 62 48 34 6e 46 69 2f 72 43 2f 6d 57 71 2f 4c 57 55 36 49 49 56 6d 49 48 6f 75 63 6d 5a 67 35 6f 7a 45 4c 62 35 77 38 47 35 46 63 42 33 6c 6e 77 47 4a 78 42 54 34 58 52 63 75 70 67 Data Ascii: AxA+zNPIRIR08npeTTO1pYkWMju8ce8TG9gvXNABBswzifngp5hp3kUKRu6cT47g3c2M4ZZjOp0oam47nftt1VFcl0SzRKm5ISeWJJhAMzC8as69wvWoqtMe+buOqWLEox8rQMdTsDK85UQYFOWrNXEOU+M0YG0wfS8tRG2Kq7D7Aiy4Ht4n59uZAmpHT56kylcbH4nFi/rC/mWq/LWU6IIVmIHoucmZg5ozELb5w8G5FcB3lnwGJxBT4XRcupg
2025-03-20 14:05:51 UTC	236	IN	Data Raw: 31 72 42 6d 7a 7a 70 4e 6d 6f 79 37 62 57 59 43 75 46 46 57 59 4d 36 32 47 76 73 44 44 55 39 55 4c 50 5a 4c 73 2b 4c 38 4c 62 6a 6b 35 50 7a 38 34 76 38 6f 76 43 7a 71 66 6a 71 4f 35 67 37 69 78 4f 4f 68 48 55 45 6c 68 47 78 6a 32 6b 47 47 68 4a 74 50 4a 54 6a 37 63 77 77 34 6c 77 54 65 42 6b 72 33 69 41 4a 42 46 64 7a 31 5a 6b 5a 56 4c 75 78 70 50 6e 47 32 4a 6f 64 4a 56 49 48 65 4f 52 54 62 53 73 78 74 56 4f 68 64 6f 6e 42 2f 68 6a 4d 36 52 4c 74 57 74 32 34 39 34 39 49 63 4c 4c 53 6f 67 68 53 66 4a 68 76 52 58 72 33 78 41 4c 6c 69 7a 5a 4e 49 2b 72 57 42 75 45 63 56 4b 33 64 4e 6d 43 71 52 69 6a 62 42 39 73 74 52 47 38 47 43 2b 73 51 32 67 39 63 4f 56 59 6c 4b 2b 74 6e 2b 57 62 6a 61 50 6c 0d 0a Data Ascii: 1rBmzzpNmoy7bWYCuFFWYM62GvsDDU9ULPZLs+L8Lbjk5Pz84v8ovCzqfjqO5g7ixOOhHUElhGxj2kGGhJtPJTj7cww4lwTeBkr3iAJBFdz1ZkZVLuxpPnG2JodJVIHeORTbSsxtVOhdonB/hjM6RLtWt24949IcLLSoghSfJhvRXr3xALlizZNI+rWBuEcVK3dNmCqRijbB9stRG8GC+sQ2g9cOVYlK+tn+WbjaPl
2025-03-20 14:05:51 UTC	167	IN	Data Raw: 61 31 0d 0a 54 69 33 69 62 6b 2b 35 6c 4d 46 56 37 67 52 54 73 32 66 50 6e 69 31 32 49 6b 67 2b 70 65 6c 75 5a 41 6a 4e 44 54 63 6e 58 58 43 4c 75 59 47 64 70 4e 33 30 59 62 63 65 38 4b 76 72 36 2b 68 32 57 62 41 43 49 6d 77 58 61 44 47 55 69 2f 39 45 33 45 52 58 4f 43 50 51 30 55 55 75 4f 2f 2f 54 6f 4a 77 50 6f 34 6d 35 58 4a 52 70 67 67 78 4d 6b 4c 59 54 4d 79 61 46 4d 57 36 54 4a 42 63 31 73 4f 35 78 53 7a 41 44 79 4a 74 38 67 64 73 6d 47 4f 4c 32 58 67 68 6a 49 64 6f 6e 7a 35 38 2f 66 0d 0a Data Ascii: a1Ti3ibk+5lMFV7gRTs2fPni12Ikg+peluZAjNDTcnXXCLuYGdpN30Ybce8Kvr6+h2WbACImwXaDGUi/9E3ERXOCPQ0UUuO//ToJwPo4m5XJRpggxMkLYTMyaFMW6TJBc1sO5xSzADyJt8gdsmGOL2XghjIdonz58/f
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 35 34 61 39 0d 0a 77 4a 47 6b 2b 33 52 62 6b 48 54 63 4d 50 57 72 71 6d 4e 39 6f 37 32 36 47 45 55 39 71 38 48 67 6b 74 43 56 66 4c 4e 78 4e 71 64 56 69 74 2b 72 4d 49 6f 32 52 46 6b 51 6d 6f 67 37 5a 71 44 44 75 75 69 65 69 68 61 78 6c 6d 6b 57 37 51 67 52 4e 51 6e 55 64 70 70 46 6a 45 38 72 76 61 78 4e 70 59 4b 42 38 4b 4a 56 78 62 62 55 4c 53 74 77 49 56 77 6a 35 31 69 4c 52 42 6c 66 58 47 56 63 49 58 32 35 55 76 6c 56 42 6c 52 56 62 62 56 31 63 2f 76 77 6a 62 4b 42 4a 71 62 47 4e 66 51 46 58 36 35 38 78 71 66 6d 65 59 2f 31 32 46 72 73 64 46 79 59 52 79 55 73 58 32 31 33 64 76 65 4e 75 6d 32 30 5a 6b 4c 68 46 65 59 4a 4d 6a 6d 65 48 70 35 66 6e 48 2b 48 55 50 48 59 39 43 54 45 4e 6e 4c 32 71 48 35 63 34 4a 77 53 39 65 41 6b 77 6d 6d 70 56 57 47 6c 6f Data Ascii: 54a9wJGk+3RbkHTcMPWrqmN9o726GEU9q8HgktCVfLNxNqdVit+rMIo2RFkQmog7ZqDDuuieihaxlmkW7QgRNQnUdppFjE8rvaxNpYKB8KJVxbbULStwIVwj51iLRBlfXGVcIX25UvlVBlRVbbV1c/vwjbKBJqbGNfQFX658xqfmeY/12FrsdFyYRyUsX213dveNum20ZkLhFeYJMjmeHp5fnH+HUPHY9CTENnL2qH5c4JwS9eAkwmmpVWGlo
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 6b 57 6b 48 35 63 6e 72 32 38 6f 2f 33 37 39 34 4b 38 67 6d 44 62 50 67 45 74 75 49 71 73 48 30 34 39 37 75 36 77 47 50 37 38 72 63 4c 5a 2f 73 78 79 4b 39 6e 61 34 6c 55 51 4c 44 56 32 55 61 33 73 74 45 6f 30 71 6b 4e 62 4b 55 73 37 31 37 48 79 70 2b 75 5a 42 35 68 36 53 68 66 61 4f 51 58 70 38 35 52 72 5a 4a 62 2b 37 77 5a 79 57 71 67 52 71 39 67 49 41 74 6e 41 75 31 57 41 6c 57 76 31 53 52 73 30 79 47 77 74 39 52 50 68 50 62 58 37 57 4f 68 4a 4e 62 4b 6f 50 75 6a 35 55 33 57 62 64 54 4f 36 78 62 63 6e 6a 43 71 33 61 57 68 55 53 55 4c 33 4a 39 75 72 63 43 39 46 38 76 4a 78 76 57 2f 33 51 67 53 6b 74 38 77 6f 54 48 73 42 75 2f 48 2f 78 6c 4f 38 2f 6c 73 50 70 2f 4a 35 76 50 70 65 41 52 66 50 67 6a 6d 6a 4d 56 53 51 42 56 79 6c 51 48 76 55 4e 7a 63 32 61 Data Ascii: kWkH5cnr28o/3794K8gmDbPgEtuIqsH0497u6wGP78rcLZ/sxyK9na4lUQLDV2Ua3stEo0qkNbKUs717Hyp+uZB5h6ShfaOQXp85RrZJb+7wZyWqgRq9gIAtnAu1WAlWv1SRs0yGwt9RPhPbX7WOhJNbKoPuj5U3WbdTO6xbcnjCq3aWhUSUL3J9urcC9F8vJxvW/3QgSkt8woTHsBu/H/xlO8/lsPp/J5vPpeARfPgjmjMVSQBVylQHvUNzc2a
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 6e 65 66 6a 46 42 6a 62 73 4f 4c 45 56 57 70 6c 6b 71 59 4a 6e 5a 35 4a 58 58 73 49 59 50 78 5a 56 6e 44 4b 4d 4e 51 6d 4b 72 44 73 53 33 49 6e 59 72 72 78 69 46 54 42 4c 4d 63 30 75 71 58 46 52 71 39 49 76 6e 56 49 73 38 62 62 62 31 37 6d 47 54 33 59 64 38 50 6f 47 76 34 5a 6e 47 2b 6e 45 6a 43 78 31 37 66 54 71 2f 63 72 42 34 47 52 61 44 72 38 75 37 35 32 50 46 61 52 62 65 47 51 53 6f 31 4a 75 4c 41 76 6c 63 48 55 4b 74 35 50 74 48 68 77 63 65 41 48 7a 55 33 78 79 71 2b 4e 65 65 79 55 65 67 33 5a 44 59 41 75 44 72 4f 67 64 37 49 46 32 71 56 74 75 79 52 63 66 48 4e 77 33 31 58 71 72 42 6c 7a 66 66 61 79 6d 55 2b 47 6d 57 68 4f 75 4d 5a 6e 49 42 33 71 62 66 2f 66 51 6b 48 69 6e 77 51 36 71 56 63 78 56 6f 71 64 73 36 6b 36 44 6c 31 55 66 6e 6e 58 35 41 45 Data Ascii: nefjFBjbsOLEVWplkqYJnZ5JXXsIYPxZVnDKMNQmKrDsS3InYrrxiFTBLMc0uqXFRq9IvnVIs8bbb17mGT3Yd8PoGv4ZnG+nEjCx17fTq/crB4GRaDr8u752PFaRbeGQSo1JuLAvlcHUKt5PtHhwceAHzU3xyq+NeeyUeg3ZDYAuDrOgd7IF2qVtuyRcfHNw31XqrBlzffaymU+GmWhOuMZnIB3qbf/fQkHinwQ6qVcxVoqds6k6Dl1UfnnX5AE
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 66 76 6e 7a 35 57 72 43 4e 6b 39 6a 70 72 52 4d 4c 7a 61 36 42 4e 38 61 49 74 6c 57 32 47 6d 70 51 51 46 5a 44 6b 32 65 37 35 2f 76 4c 53 37 44 6c 41 78 4e 58 54 4a 38 5a 36 69 44 6a 61 32 77 54 74 31 54 74 2b 6e 68 50 49 34 58 52 6e 69 4b 75 41 49 2b 2f 77 33 5a 63 42 36 74 4f 36 78 56 79 41 46 69 4a 56 4b 61 41 6d 35 37 4f 31 2f 51 51 35 6f 4a 31 39 6e 57 67 56 6e 7a 79 51 4b 44 31 76 66 34 61 62 4f 30 72 4f 4b 6f 67 56 71 66 70 54 77 76 70 45 70 70 48 68 6d 77 78 62 4f 38 35 6e 71 63 75 6e 54 5a 64 31 4b 78 5a 67 6d 55 50 32 43 47 37 65 46 32 42 36 73 6d 57 37 61 76 73 6c 36 2f 41 31 55 66 67 34 4c 43 7a 43 4c 5a 61 45 2f 63 43 42 52 72 66 2f 59 30 56 74 44 64 42 53 53 6f 46 57 77 37 59 61 74 37 66 6b 45 63 75 33 48 45 52 63 67 75 73 4c 4c 41 74 6d 73 Data Ascii: fvnz5WrCNk9jprRMLza6BN8aItlW2GmpQQFZDk2e75/vLS7DlAxNXTJ8Z6iDja2wTt1Tt+nhPI4XRniKuAI+/w3ZcB6tO6xVyAFiJVKaAm57O1/QQ5oJ19nWgVnzyQKD1vf4abO0rOKogVqfpTwvpEppHhmwxbO85nqcunTZd1KxZgmUP2CG7eF2B6smW7avsl6/A1Ufg4LCzCLZaE/cCBRrf/Y0VtDdBSSoFWw7Yat7fkEcu3HERcgusLLAtms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49753	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	404	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:05:51 UTC	1055	IN	HTTP/1.1 200 OK Version: 737894419 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 20 Mar 2025 14:05:51 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:51 UTC	165	IN	Data Raw: 32 33 66 30 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 46 61 20 67 62 5f 32 64 20 67 62 5f 50 65 20 67 62 5f Data Ascii: 23f0)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Fa gb_2d gb_Pe gb_
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 72 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 51 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 6c 64 20 67 62 5f 70 64 20 67 62 5f 48 64 20 67 62 5f 6d 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 78 64 20 67 62 5f 73 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c Data Ascii: rd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Qd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_ld gb_pd gb_Hd gb_md\"\u003e\u003cdiv class\u003d\"gb_xd gb_sd\"\u003e\u003cdiv class\
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 5c 75 30 30 33 63 5c 2f 73 76 67 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 43 63 20 67 62 5f 52 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 61 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 34 64 20 67 62 5f 45 63 20 67 62 5f 37 64 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 47 6f 6f 67 6c 65 5c 22 20 68 72 65 66 5c 75 30 30 33 64 5c 22 2f 3f 74 61 62 5c 75 30 30 33 64 72 72 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4f 64 20 67 62 5f 36 64 5c 22 20 61 72 69 61 2d Data Ascii: \u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Cc gb_R\"\u003e\u003cdiv class\u003d\"gb_Dc\"\u003e\u003ca class\u003d\"gb_4d gb_Ec gb_7d\" aria-label\u003d\"Google\" href\u003d\"/?tab\u003drr\"\u003e\u003cspan class\u003d\"gb_Od gb_6d\" aria-
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 22 20 68 72 65 66 5c 75 30 30 33 64 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 67 68 70 3f 68 6c 5c 75 30 30 33 64 65 6e 5c 75 30 30 32 36 61 6d 70 3b 74 61 62 5c 75 30 30 33 64 72 69 5c 75 30 30 32 36 61 6d 70 3b 6f 67 62 6c 5c 22 20 74 61 72 67 65 74 5c 75 30 30 33 64 5c 22 5f 74 6f 70 5c 22 5c 75 30 30 33 65 49 6d 61 67 65 73 5c 75 30 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 51 65 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 33 63 5c 22 Data Ascii: " href\u003d\"https://www.google.com/imghp?hl\u003den\u0026amp;tab\u003dri\u0026amp;ogbl\" target\u003d\"_top\"\u003eImages\u003c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Qe\"\u003e\u003cdiv class\u003d\"gb_3c\"
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 30 30 33 65 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 20 67 62 5f 63 64 20 67 62 5f 30 5c 22 20 64 61 74 61 2d 6f 67 73 72 2d 66 62 5c 75 30 30 33 64 5c 22 74 72 75 65 5c 22 20 64 61 74 61 2d 6f 67 73 72 2d 61 6c 74 5c 75 30 30 33 64 5c 22 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 77 61 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 61 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 42 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 47 6f 6f 67 6c 65 20 61 70 70 73 5c 22 20 68 72 65 66 5c 75 30 30 33 64 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6e 74 6c 2f 65 Data Ascii: 003e \u003cdiv class\u003d\"gb_J gb_cd gb_0\" data-ogsr-fb\u003d\"true\" data-ogsr-alt\u003d\"\" id\u003d\"gbwa\"\u003e\u003cdiv class\u003d\"gb_D\"\u003e\u003ca class\u003d\"gb_B\" aria-label\u003d\"Google apps\" href\u003d\"https://www.google.com/intl/e
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 69 6d 61 67 65 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 73 76 67 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 20 67 62 5f 70 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 68 65 61 64 65 72 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 52 63 20 67 62 5f Data Ascii: image\u003e\u003c\/svg\u003e\u003c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_a gb_pd\"\u003e\u003c\/div\u003e\u003c\/header\u003e\u003cdiv class\u003d\"gb_Rc gb_
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 61 79 29 66 6f 72 28 76 61 72 20 64 20 6f 66 20 63 29 5f 2e 6a 64 28 61 2c 62 2c 64 29 3b 65 6c 73 65 7b 64 5c 75 30 30 33 64 28 30 2c 5f 2e 7a 29 28 61 2e 43 2c 61 2c 62 29 3b 63 6f 6e 73 74 20 65 5c 75 30 30 33 64 61 2e 76 2b 63 3b 61 2e 76 2b 2b 3b 62 2e 64 61 74 61 73 65 74 2e 65 71 69 64 5c 75 30 30 33 64 65 3b 61 2e 42 5b 65 5d 5c 75 30 30 33 64 64 3b 62 5c 75 30 30 32 36 5c 75 30 30 32 36 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 2c 64 2c 21 31 29 3a 62 5c 75 30 30 32 36 5c 75 30 30 32 36 62 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 62 2e 61 74 74 61 63 68 45 76 65 6e 74 28 5c 22 6f 6e 5c 22 2b 63 2c 64 29 3a 61 2e 6f 2e 6c 6f 67 28 45 72 72 6f 72 28 5c 22 44 60 5c 22 2b 62 29 Data Ascii: ay)for(var d of c)_.jd(a,b,d);else{d\u003d(0,_.z)(a.C,a,b);const e\u003da.v+c;a.v++;b.dataset.eqid\u003de;a.B[e]\u003dd;b\u0026\u0026b.addEventListener?b.addEventListener(c,d,!1):b\u0026\u0026b.attachEvent?b.attachEvent(\"on\"+c,d):a.o.log(Error(\"D`\"+b)
2025-03-20 14:05:51 UTC	1220	IN	Data Raw: 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 75 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 76 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 77 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 76 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 73 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 6c 68 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 78 64 5c 75 30 30 33 64 5b 74 64 28 5c 22 64 61 74 61 5c 22 29 2c Data Ascii: )\u003d\u003d\u003da+\":\")};_.ud\u003dglobalThis.trustedTypes;_.vd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.wd\u003dnew _.vd(\"about:invalid#zClosurez\");_.sd\u003dclass{constructor(a){this.lh\u003da}};_.xd\u003d[td(\"data\"),
2025-03-20 14:05:51 UTC	503	IN	Data Raw: 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 4a 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 48 64 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 48 5c 22 29 3b 7d 3b 5f 2e 4c 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4b 64 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 4d 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 76 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 76 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 48 5c 22 29 3b 65 6c 73 65 20 61 5c 75 30 30 33 64 5f 2e 4c 64 28 61 29 3b 72 65 Data Ascii: ptURL(a):a)};_.Jd\u003dfunction(a){if(a instanceof _.Hd)return a.i;throw Error(\"H\");};_.Ld\u003dfunction(a){if(Kd.test(a))return a};_.Md\u003dfunction(a){if(a instanceof _.vd)if(a instanceof _.vd)a\u003da.i;else throw Error(\"H\");else a\u003d_.Ld(a);re
2025-03-20 14:05:51 UTC	560	IN	Data Raw: 32 32 39 0d 0a 28 61 2c 62 2c 63 29 21 5c 75 30 30 33 64 5c 75 30 30 33 64 76 6f 69 64 20 30 7d 3b 5c 6e 5f 2e 50 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 42 64 28 5f 2e 72 63 28 61 2c 62 29 29 7d 3b 5f 2e 53 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 41 64 28 5f 2e 72 63 28 61 2c 62 29 29 7d 3b 5f 2e 54 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 6c 65 74 20 64 3b 72 65 74 75 72 6e 28 64 5c 75 30 30 33 64 5f 2e 50 64 28 61 2c 62 29 29 21 5c 75 30 30 33 64 6e 75 6c 6c 3f 64 3a 63 7d 3b 5f 2e 51 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 6c 65 74 20 64 3b 72 65 74 75 72 6e 28 Data Ascii: 229(a,b,c)!\u003d\u003dvoid 0};\n_.Pd\u003dfunction(a,b){return _.Bd(_.rc(a,b))};_.S\u003dfunction(a,b){return _.Ad(_.rc(a,b))};_.T\u003dfunction(a,b,c\u003d0){let d;return(d\u003d_.Pd(a,b))!\u003dnull?d:c};_.Qd\u003dfunction(a,b,c\u003d0){let d;return(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49755	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	393	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:05:51 UTC	970	IN	HTTP/1.1 200 OK Version: 737894419 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 20 Mar 2025 14:05:51 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:51 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2025-03-20 14:05:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.17	49752	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e98900f5-201e-003f-2ffc-986d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bd2r62ghC1EWRf0v00000000ek000000000nysy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.17	49750	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b265abb7-e01e-0020-75fc-98de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bdx922jhC1EWRcnfs0000000g4g000000006y0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.17	49757	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ce2746f0-101e-0017-6ad4-9847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bdbgz5hhC1EWR2wnc0000000bdg00000000anvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.17	49756	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 07d48fbe-c01e-00ad-6bd6-98a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140551Z-186895dd8bdz6l5qhC1EWRwurn0000000eb0000000002g9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.17	49758	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:51 UTC	199	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 500700a4-001e-005a-76fc-98c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bd48sshhC1EWRwmxg0000000gg000000000g15n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.17	49759	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:52 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 5b00b1d8-a01e-001e-0127-9949ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bdh8h7whC1EWRqw7s0000000fvg00000000esg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.17	49761	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 3cde6f7a-601e-000d-6ac8-982618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bdx922jhC1EWRcnfs0000000g3000000000b4v5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.17	49760	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 9a5b28ed-801e-002a-6dfc-9831dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bdxtkvkhC1EWRt6ys0000000bwg000000001uw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.17	49762	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: e8ac417c-f01e-0099-195c-999171000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bdz6l5qhC1EWRwurn0000000e9g000000006g54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:52 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.17	49764	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 21b04865-201e-000c-40ee-9879c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140553Z-186895dd8bdjz8r9hC1EWR3n3n0000000dv000000000ekba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.17	49765	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 7e8ae44e-e01e-0052-2e2b-99d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bdxtkvkhC1EWRt6ys0000000bvg0000000050ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.17	49769	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 8706f0b8-101e-00a2-44fc-989f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140552Z-186895dd8bdlbckjhC1EWR44e40000000crg00000000nsm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.17	49766	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:53 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9a9edee9-f01e-00aa-2ffa-988521000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140553Z-186895dd8bdfvrj8hC1EWRcaww0000000h20000000000r45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.17	49770	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:52 UTC	199	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 23ee7c0c-a01e-0021-5bfc-98814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140553Z-186895dd8bdmf545hC1EWRky1s0000000hmg0000000000f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.17	49771	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:53 UTC	199	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: daa3df29-401e-005b-0827-999c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140553Z-186895dd8bdvpml2hC1EWRc88n0000000chg00000000dc68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.17	49772	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:53 UTC	199	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 34eb2a21-701e-0097-70fc-98b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140553Z-186895dd8bdx922jhC1EWRcnfs0000000g4g000000006y8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.17	49774	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:53 UTC	199	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: a5684499-201e-0033-13fc-98b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140553Z-186895dd8bddc5hwhC1EWR2xzg0000000ddg000000007g6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.17	49773	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:53 UTC	199	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:54 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 6b3d5409-d01e-00ad-47fc-98e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140554Z-186895dd8bdfvrj8hC1EWRcaww0000000h0g000000004xst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:54 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.17	49779	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	199	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:54 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e55957ae-d01e-0066-15fc-98ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140554Z-186895dd8bd2nvqdhC1EWRsu1n0000000drg000000002fyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:54 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.17	49778	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	199	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: adea59cd-e01e-0071-2dfc-9808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140554Z-186895dd8bdbgz5hhC1EWR2wnc0000000bcg00000000dg31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49783	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	521	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=h&oit=1&cp=1&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.17	49782	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	199	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 23ee82df-a01e-0021-5bfc-98814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140554Z-186895dd8bdh8h7whC1EWRqw7s0000000g10000000000gwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.17	49784	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	199	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 93ecc4a6-e01e-0099-2efc-98da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140554Z-186895dd8bdkwn8shC1EWRkk180000000f0g000000001gbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.17	49785	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	199	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:54 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: fa5ba314-001e-0028-40fc-98c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140554Z-186895dd8bddc5hwhC1EWR2xzg0000000dc000000000c6wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.17	49775	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:54 UTC	199	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b8ae1ed7-901e-0029-4365-99274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bd48sshhC1EWRwmxg0000000gfg00000000h2qc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49787	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	523	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=htt&oit=1&cp=3&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.17	49788	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	199	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: aec77d53-601e-003d-66fc-986f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bdvl5lbhC1EWRmxds0000000gsg00000000d89x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49790	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	524	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http&oit=1&cp=4&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.17	49789	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	199	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0ef2de91-e01e-000c-77d4-988e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bdbgz5hhC1EWR2wnc0000000bgg0000000028tx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49792	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	737	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https&oit=1&cp=5&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=vmOcs6L1rKAo4R-hNFub5JvW7Hx6ApzPrs0KmTTmi6wBqtw5FjslvzGe4tOQV_paSS6g-ObLb_R5--hfwTZW15DMnFz3NLi9hMQrQTA4-MsTLV68_MMyQOVTdK7NPlvpNxycYbY_Va5QlXgw2gfugr-bS5rKIbIsYLYx85HSQTzkpW11wYoexqgIv_0DSr1RCQ
2025-03-20 14:05:55 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-otWidSqTsroRADQBxj8i4w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:55 UTC	730	IN	Data Raw: 32 64 33 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 22 2c 5b 22 68 74 74 70 73 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 20 6d 75 73 69 63 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 20 2f 69 6e 6b 22 2c 22 68 74 74 70 73 20 2f 2f 70 34 2e 74 65 6d 70 75 73 20 75 6e 6c 69 6d 69 74 65 64 2e 6f 72 67 22 2c 22 68 74 74 70 73 20 2f 2f 68 65 61 6c 74 68 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 20 6c 69 63 65 6e 73 69 6e 67 2e 6d 61 73 73 2e 67 6f 76 2f 75 70 6c 6f 61 64 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6c 69 6e 6b 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 70 69 63 67 Data Ascii: 2d3)]}'["https",["https","https //www.youtube.com music","https //www.microsoft.com /ink","https //p4.tempus unlimited.org","https //health professional licensing.mass.gov/upload","https://microsoft.com/link","https://www.google.com","https://www.epicg
2025-03-20 14:05:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.17	49780	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	199	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 35c54d8b-a01e-0084-56fc-989ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bdlbckjhC1EWR44e40000000cyg000000001nv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.17	49793	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	199	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7aeb8e56-c01e-00a1-33fc-987e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bdvpml2hC1EWRc88n0000000ck000000000c6pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.17	49794	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	199	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: fa5ba4c4-001e-0028-53fc-98c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bdcbk5shC1EWR4kg000000005ng00000000kc3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:55 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.17	49795	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:55 UTC	199	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:55 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 39468eac-901e-008f-24fc-9867a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140555Z-186895dd8bddc5hwhC1EWR2xzg0000000df0000000003vrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.17	49796	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 302ade34-d01e-00a1-6dfc-9835b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bdbfcjthC1EWR3g000000000fug000000004mfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49797	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	740	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A&oit=4&cp=6&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=vmOcs6L1rKAo4R-hNFub5JvW7Hx6ApzPrs0KmTTmi6wBqtw5FjslvzGe4tOQV_paSS6g-ObLb_R5--hfwTZW15DMnFz3NLi9hMQrQTA4-MsTLV68_MMyQOVTdK7NPlvpNxycYbY_Va5QlXgw2gfugr-bS5rKIbIsYLYx85HSQTzkpW11wYoexqgIv_0DSr1RCQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.17	49798	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 49ffc4af-b01e-003e-5ffc-988e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bdqzr24hC1EWRscdn0000000c1g000000001u2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.17	49799	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 21dccd39-201e-000c-7ffc-9879c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bdmqlthhC1EWRay9g0000000fcg00000000hm0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.17	49791	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 27d5a4e4-b01e-0084-36fc-98d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bdz6l5qhC1EWRwurn0000000e4000000000nenn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.17	49800	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2935199c-601e-003e-67fc-983248000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bdx922jhC1EWRcnfs0000000g0g00000000kdv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49802	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	746	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F&oit=4&cp=8&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=vmOcs6L1rKAo4R-hNFub5JvW7Hx6ApzPrs0KmTTmi6wBqtw5FjslvzGe4tOQV_paSS6g-ObLb_R5--hfwTZW15DMnFz3NLi9hMQrQTA4-MsTLV68_MMyQOVTdK7NPlvpNxycYbY_Va5QlXgw2gfugr-bS5rKIbIsYLYx85HSQTzkpW11wYoexqgIv_0DSr1RCQ
2025-03-20 14:05:56 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-EwX6TRR7eJNNLbyoM_WI5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:56 UTC	764	IN	Data Raw: 32 66 35 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 22 2c 5b 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 20 6d 75 73 69 63 22 2c 22 68 74 74 70 73 20 2f 2f 63 68 61 74 67 70 74 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 20 2f 69 6e 6b 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 22 2c 22 68 74 74 70 73 20 2f 2f 64 69 73 63 6f 72 64 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 6d 61 70 73 22 2c 22 68 74 74 70 73 20 2f 2f 70 34 2e 74 65 6d 70 75 73 20 75 6e 6c 69 6d 69 74 65 64 2e 6f 72 67 22 2c Data Ascii: 2f5)]}'["https://",["https //www.youtube.com music","https //chatgpt.com login","https //www.microsoft.com /ink","https //www.facebook.com login","https //www","https //discord.com login","https //www.google.com maps","https //p4.tempus unlimited.org",
2025-03-20 14:05:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.17	49803	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: f395fd81-301e-003f-49fc-98266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bdxtkvkhC1EWRt6ys0000000bq000000000n0fb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.17	49804	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 06571888-901e-007b-78d4-98ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140556Z-186895dd8bd77tnghC1EWRfgvg0000000cwg000000002ynb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.17	49806	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: fe2f11af-b01e-0002-2ffc-981b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bd2nvqdhC1EWRsu1n0000000dqg000000005nqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.17	49807	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:56 UTC	199	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d36295ff-301e-0096-28fc-98e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdxtkvkhC1EWRt6ys0000000bqg00000000kvnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.17	49808	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	199	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aaa10659-601e-000d-4759-992618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdvl5lbhC1EWRmxds0000000gu0000000009bgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.17	49809	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	199	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: ec381644-a01e-0002-3256-995074000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdx922jhC1EWRcnfs0000000g1000000000h38f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.17	49810	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	199	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f21bad95-001e-0066-44fc-98561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdpn7zfhC1EWR5w3w0000000e50000000000u3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.17	49811	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	199	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: bb5f1669-b01e-00ab-4d66-99dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdmqlthhC1EWRay9g0000000fc000000000kgzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.17	49812	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	199	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 30b8d5c5-201e-0000-67fc-98a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdwwt8hhC1EWR4xag0000000f6g00000000fvnf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:57 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.17	49813	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	199	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2711cfed-801e-0083-7ed6-98f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140557Z-186895dd8bdh8h7whC1EWRqw7s0000000fu000000000m3c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49805	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:57 UTC	755	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F1&oit=4&cp=9&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
2025-03-20 14:05:58 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:57 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2xJCmSWw_DDVeil9U1WjrA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:58 UTC	659	IN	Data Raw: 32 38 63 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 31 22 2c 5b 22 68 74 74 70 73 20 2f 2f 31 39 32 2e 31 36 38 2e 6c 2e 31 22 2c 22 68 74 74 70 73 20 2f 2f 31 39 32 2e 31 36 38 2e 6c 2e 32 35 34 22 2c 22 68 74 74 70 73 20 2f 2f 31 30 2e 30 2e 30 2e 30 2e 31 22 2c 22 68 74 74 70 73 20 2f 2f 31 76 31 2e 6c 6f 6c 20 75 6e 62 6c 6f 63 6b 65 64 22 2c 22 68 74 74 70 73 20 2f 2f 31 39 32 20 6c 2e 31 36 38 2e 30 2e 31 22 2c 22 68 74 74 70 73 20 2f 2f 31 70 61 73 73 77 6f 72 64 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 68 74 74 70 73 20 2f 2f 31 39 32 2e 31 36 38 2e 6c 2e 30 22 2c 22 68 74 74 70 73 20 2f 2f 31 39 32 20 6c 2e 31 36 38 2e 31 2e 31 22 2c 22 68 74 74 70 73 3a 2f 2f 31 39 32 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 31 33 33 37 2e 63 6f 6d 22 Data Ascii: 28c)]}'["https://1",["https //192.168.l.1","https //192.168.l.254","https //10.0.0.0.1","https //1v1.lol unblocked","https //192 l.168.0.1","https //1password.com login","https //192.168.l.0","https //192 l.168.1.1","https://192.com","https://1337.com"
2025-03-20 14:05:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.17	49815	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: ade2a916-e01e-0071-78fa-9808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdkvr8rhC1EWR0teg0000000d5000000000a2xp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.17	49816	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: cc73a542-a01e-003d-2ed4-9898d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdmf545hC1EWRky1s0000000heg00000000ewvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:58 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.17	49817	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8c3c7d96-b01e-001e-21d4-980214000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdfvrj8hC1EWRcaww0000000h10000000003qq3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49819	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	757	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F14&oit=4&cp=10&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.17	49818	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 5543aaf5-201e-005d-04fc-98afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdvpml2hC1EWRc88n0000000cpg000000002rsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:58 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.17	49820	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 302ae399-d01e-00a1-06fc-9835b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bd5zpn7hC1EWRryhc0000000f600000000059xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49822	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	758	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142&oit=4&cp=11&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
2025-03-20 14:05:59 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Y5bWREXODLlRHgbRMSwrkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:05:59 UTC	681	IN	Data Raw: 32 61 32 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 31 34 32 22 2c 5b 22 68 74 74 70 73 20 2f 2f 31 34 32 22 2c 22 68 74 74 70 73 20 31 34 32 30 20 74 61 6d 69 6e 20 69 72 20 63 61 73 65 73 22 2c 22 68 74 74 70 73 20 31 34 32 30 22 2c 22 68 74 74 70 73 20 31 39 32 2e 31 36 38 20 6c 20 31 34 32 22 2c 22 68 74 74 70 73 20 78 6b 63 64 20 63 6f 6d 20 31 34 32 35 22 2c 22 68 74 74 70 73 20 62 65 72 73 61 6d 61 62 75 6d 6e 20 63 6f 6d 20 31 34 32 22 2c 22 68 74 74 70 73 20 2f 2f 77 77 77 2e 63 65 74 69 73 20 31 34 32 20 65 64 75 2e 6d 78 2f 61 73 70 69 72 61 6e 74 65 73 2f 70 72 6f 63 65 73 6f 22 2c 22 68 74 74 70 73 20 68 75 20 75 6e 69 62 65 74 20 31 34 32 20 63 6f 6d 22 2c 22 68 74 74 70 73 20 69 66 79 20 61 63 20 31 34 32 72 22 2c 22 68 74 74 70 73 Data Ascii: 2a2)]}'["https://142",["https //142","https 1420 tamin ir cases","https 1420","https 192.168 l 142","https xkcd com 1425","https bersamabumn com 142","https //www.cetis 142 edu.mx/aspirantes/proceso","https hu unibet 142 com","https ify ac 142r","https
2025-03-20 14:05:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.17	49821	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 601411d2-c01e-008e-1dfc-987381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdcbk5shC1EWR4kg000000005t0000000006z2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.17	49823	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a31e322a-201e-0051-48d4-987340000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdbgz5hhC1EWR2wnc0000000bcg00000000dgmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.17	49814	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:58 UTC	199	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:58 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: acb8527f-101e-0028-0be3-988f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140558Z-186895dd8bdsg5dkhC1EWR1ben0000000av000000000hz59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.17	49824	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:59 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: e7c323c7-f01e-0099-46fc-989171000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140559Z-186895dd8bdcbk5shC1EWR4kg000000005sg000000008hvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.17	49825	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 709193c1-001e-00a2-54fc-98d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140559Z-186895dd8bdsg5dkhC1EWR1ben0000000ax000000000cuse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.17	49827	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 648653c8-301e-005d-11fc-98e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140559Z-186895dd8bdhdfglhC1EWRt6cn00000003m000000000kyph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.17	49826	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: f66d9286-401e-0035-1efc-9882d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140559Z-186895dd8bdh8h7whC1EWRqw7s0000000fu000000000m3fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.17	49828	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:05:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 21dcd2bf-201e-000c-70fc-9879c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140559Z-186895dd8bd2nvqdhC1EWRsu1n0000000dhg00000000kqd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:05:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.17	49829	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 5cbf54e9-401e-0016-25fc-9853e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bd77tnghC1EWRfgvg0000000cqg00000000kn3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.17	49831	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d25aff55-e01e-00aa-7fd4-98ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bdkwn8shC1EWRkk180000000eug00000000hkme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.17	49830	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2935229e-601e-003e-02fc-983248000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bdfvrj8hC1EWRcaww0000000gug00000000q5y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.17	49832	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:05:59 UTC	199	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: c0bb62c7-c01e-000b-0ffc-98e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bd5zpn7hC1EWRryhc0000000f5g000000006pmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.17	49833	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	199	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 218539fd-301e-0020-2cca-986299000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bdh8h7whC1EWRqw7s0000000fzg000000004h6c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49837	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	759	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.&oit=4&cp=12&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.17	49834	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	199	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 23ee9777-a01e-0021-55fc-98814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bdqzr24hC1EWRscdn0000000bwg00000000g6pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.17	49836	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	199	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9aa7351e-f01e-00aa-67fc-988521000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bd5zpn7hC1EWRryhc0000000f1000000000n5tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.17	49835	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	200	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 67dccf82-901e-0048-5bfc-98b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bdh8h7whC1EWRqw7s0000000fwg00000000casm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.17	49838	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	200	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: a440ba48-401e-0064-25fc-9854af000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bd2nvqdhC1EWRsu1n0000000dhg00000000kqgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.17	49839	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	199	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:00 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:00 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1dbd361c-b01e-0053-4dfc-98cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140600Z-186895dd8bdx922jhC1EWRcnfs0000000g5g000000003wa6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:00 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.17	49840	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:00 UTC	761	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.20&oit=3&cp=14&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.17	49844	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	762	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202&oit=3&cp=15&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.17	49841	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	200	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 23d0dc57-b01e-0021-4927-99cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bd48sshhC1EWRwmxg0000000gfg00000000h38m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:01 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.17	49843	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	199	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:01 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 2beed7cf-801e-0067-7ff7-98fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bddc5hwhC1EWR2xzg0000000da000000000hqs0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:01 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.17	49846	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	199	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e43b694-601e-006f-53fb-98e43f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bdlbckjhC1EWR44e40000000ct000000000g08z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:01 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.17	49847	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	763	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.&oit=3&cp=16&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.17	49845	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	199	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 4706514e-501e-0029-5efb-98d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bdkwn8shC1EWRkk180000000f00000000003073 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:01 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.17	49842	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	199	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 94229236-101e-008d-69fb-9892e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bdfvrj8hC1EWRcaww0000000gug00000000q62m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:01 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.17	49848	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	199	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 46cd4b93-f01e-003c-5afc-988cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bdqzr24hC1EWRscdn0000000c1g000000001ukr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.17	49850	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	199	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 92db177d-601e-0001-7865-99faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140601Z-186895dd8bdh8h7whC1EWRqw7s0000000fw000000000dq1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.17	49852	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:01 UTC	765	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.19&oit=3&cp=18&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.17	49853	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 0894b5b7-501e-0064-23fc-981f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140602Z-186895dd8bd48sshhC1EWRwmxg0000000gmg000000007y12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.17	49854	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: dd387a22-101e-0046-08fc-9891b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140602Z-186895dd8bdbgz5hhC1EWR2wnc0000000beg000000007rpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.17	49856	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	766	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190&oit=3&cp=19&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.17	49855	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 09a6e68e-601e-005c-1afc-98f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140602Z-186895dd8bdmf545hC1EWRky1s0000000hcg00000000nh5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.17	49857	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 5bd3ec88-001e-0034-5afc-98dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140602Z-186895dd8bdh8h7whC1EWRqw7s0000000fu000000000m3tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.17	49858	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	767	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.&oit=3&cp=20&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
2025-03-20 14:06:02 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-B8DJWZyM5INav3t7cHsP-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:06:02 UTC	146	IN	Data Raw: 38 63 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 31 34 32 2e 32 30 32 2e 31 39 30 2e 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 8c)]}'["https://142.202.190.",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2025-03-20 14:06:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.17	49859	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:02 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 7c13ab3c-801e-0078-36fc-98bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140602Z-186895dd8bdvpml2hC1EWRc88n0000000cn0000000006r1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:02 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.17	49851	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	768	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.1&oit=3&cp=21&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
2025-03-20 14:06:03 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:02 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-FkH74-5qoH8klJaGuTdlDw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:06:03 UTC	147	IN	Data Raw: 38 64 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 31 34 32 2e 32 30 32 2e 31 39 30 2e 31 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 8d)]}'["https://142.202.190.1",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2025-03-20 14:06:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.17	49860	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: b265ccfa-e01e-0020-1afc-98de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdxtkvkhC1EWRt6ys0000000brg00000000g5ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.17	49861	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:02 UTC	199	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: d89ad599-901e-007b-27fc-98ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdwwt8hhC1EWR4xag0000000f9g000000007fvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.17	49849	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e1993d42-301e-0052-09fc-9865d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdvl5lbhC1EWRmxds0000000gq000000000nb00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.17	49862	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dd387a5d-101e-0046-35fc-9891b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdxtkvkhC1EWRt6ys0000000bs000000000f0nc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.17	49863	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 9a222d0b-801e-002a-11e9-9831dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdjz8r9hC1EWR3n3n0000000dz00000000045vw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.17	49864	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 573cde67-a01e-0070-7bfc-98573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdbgz5hhC1EWR2wnc0000000bgg0000000029u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.17	49866	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 68f967ad-701e-000d-73fc-986de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bd2nvqdhC1EWRsu1n0000000dpg0000000085ht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.17	49865	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 7aeb9dcd-c01e-00a1-73fc-987e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdsg5dkhC1EWR1ben0000000b0g000000003ben x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.17	49867	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:03 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:03 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: d2f3684c-f01e-0096-6dfc-9810ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140603Z-186895dd8bdjz8r9hC1EWR3n3n0000000dzg000000002wzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:03 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.17	49868	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:03 UTC	199	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: af20d131-301e-000c-52fc-98323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdhdfglhC1EWRt6cn00000003qg00000000b4g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.17	49869	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	199	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 919dbd8f-401e-0015-1efc-980e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdh8h7whC1EWRqw7s0000000fu000000000m3yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.17	49870	142.250.65.164	443	2612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	769	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2F142.202.190.19&oit=3&cp=22&pgcl=7&gs_rn=42&psi=GnWOalsS5k_67ifV&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=fI8jGLA2E5SNDTKeIo-jXfOUoKnMGkRv5DHFkH3bUN2CDAu4Lnh7KHikucEGlkpqWU5I4gd1eUOU0OUQDfEuk3HOPvOO9RJhOfAde-uyvUjWXImbwoSavZh5gj1re39a6z0LDc7kyCzXaARD8LXMh-L3LUERLjg9fTEt3nW0MDPCipLMy2hlfrSmNiUysqHr3NpN9kY-Rg
2025-03-20 14:06:04 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-z0Msxeug_m86Ciq3M-TmmQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:06:04 UTC	148	IN	Data Raw: 38 65 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 31 34 32 2e 32 30 32 2e 31 39 30 2e 31 39 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 8e)]}'["https://142.202.190.19",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2025-03-20 14:06:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.17	49871	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	199	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 5543bfda-201e-005d-80fc-98afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdkvr8rhC1EWR0teg0000000d8g0000000001zd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.17	49873	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	199	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: f3705e96-501e-0035-1efc-98c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdhdfglhC1EWRt6cn00000003n000000000gnh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.17	49874	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	199	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 6b3d7f13-d01e-00ad-12fc-98e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bddc5hwhC1EWR2xzg0000000d8g00000000p2e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.17	49875	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	199	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:04 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 7a5013c6-b01e-0070-54fc-981cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdkwn8shC1EWRkk180000000evg00000000fp00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.17	49872	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:04 UTC	199	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:05 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:04 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: bb643b69-701e-0032-7dfc-98a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140604Z-186895dd8bdkwn8shC1EWRkk180000000eyg0000000075kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:05 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.17	49878	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:05 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:05 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 2e4555e8-501e-0078-3cfc-9806cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140605Z-186895dd8bdx922jhC1EWRcnfs0000000g60000000002dds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:05 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.17	49879	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:05 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:05 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 919dbf93-401e-0015-6ffc-980e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140605Z-186895dd8bdwwt8hhC1EWR4xag0000000f6000000000h47p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:05 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.17	49880	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:05 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:05 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: ccc076b8-301e-0051-3f2b-9938bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140605Z-186895dd8bdxtkvkhC1EWRt6ys0000000bu0000000008n1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:05 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.17	49877	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:05 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 09a6eb5f-601e-005c-23fc-98f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140605Z-186895dd8bdkvr8rhC1EWR0teg0000000d7g000000002snw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:05 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.17	49881	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9aa7403c-f01e-00aa-7afc-988521000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140605Z-186895dd8bdmqlthhC1EWRay9g0000000ffg000000009rvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.17	49876	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 65ac4ccb-c01e-0014-0e41-99a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bdx922jhC1EWRcnfs0000000g5g000000003wvn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.17	49882	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0894c12a-501e-0064-30fc-981f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bdbgz5hhC1EWR2wnc0000000bg0000000003puv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.17	49883	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:05 UTC	199	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5bd3f5b0-001e-0034-27fc-98dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bdsg5dkhC1EWR1ben0000000b0g000000003bsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.17	49884	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:06 UTC	199	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9fc8dd2d-f01e-0000-2df5-98193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bdqzr24hC1EWRscdn0000000byg00000000a1fr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.17	49885	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:06 UTC	199	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 2e4556d3-501e-0078-1bfc-9806cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bddc5hwhC1EWR2xzg0000000dc000000000c8d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.17	49889	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:06 UTC	199	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: f4f7cb2d-501e-00a3-18fc-98c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bdxtkvkhC1EWRt6ys0000000bwg000000001wds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:06 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.17	49888	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:06 UTC	199	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:07 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:06 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a603d1a1-801e-0047-26fc-987265000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140606Z-186895dd8bdkwn8shC1EWRkk180000000eu000000000m0ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:07 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.17	49894	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:07 UTC	199	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:07 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:07 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 5643907d-c01e-007a-1c2b-99b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140607Z-186895dd8bdvpml2hC1EWRc88n0000000cmg000000008gcp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:07 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.17	49895	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:07 UTC	199	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:07 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:07 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: f21bc6ad-001e-0066-6bfc-98561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140607Z-186895dd8bdh8h7whC1EWRqw7s0000000g10000000000k1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-20 14:06:07 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.17	49893	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:07 UTC	199	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:07 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:07 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d2f374ae-f01e-0096-3afc-9810ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140607Z-186895dd8bdx922jhC1EWRcnfs0000000g1g00000000fht7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:07 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.17	49892	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:07 UTC	199	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:07 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:07 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 8f906d20-001e-00ad-4c2c-99554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140607Z-186895dd8bdcbk5shC1EWR4kg000000005vg0000000003vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:07 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.17	49897	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:07 UTC	199	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:07 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:07 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 962f12df-f01e-0052-10fc-989224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140607Z-186895dd8bddc5hwhC1EWR2xzg0000000dag00000000h2k5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:07 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.17	49900	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:07 UTC	199	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:08 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:07 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: e6af1e5d-001e-0014-6dfc-985151000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140607Z-186895dd8bdpn7zfhC1EWR5w3w0000000e1g00000000a7qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:08 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.17	49904	13.107.246.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:06:08 UTC	199	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-20 14:06:08 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:06:08 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f9d931b0-d01e-0082-2efc-98e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20250320T140608Z-186895dd8bdbfcjthC1EWR3g000000000fsg00000000a12v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-20 14:06:08 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe
• cmd.exe
• conhost.exe
• nslookup.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe
• cmd.exe
• conhost.exe
• nslookup.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5132, Parent PID: 4208

Function Logs

General

Target ID:	0
Start time:	10:05:25
Start date:	20/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2612, Parent PID: 5132

Function Logs

General

Target ID:	1
Start time:	10:05:25
Start date:	20/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,4930913577362111281,6245488040207069887,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 936, Parent PID: 4208

Function Logs

General

Target ID:	2
Start time:	10:05:27
Start date:	20/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://142.202.190.19"
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 1988, Parent PID: 4280

Function Logs

General

Target ID:	16
Start time:	10:06:22
Start date:	20/03/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\cmd.exe"
Imagebase:	0x7ff7eca00000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

File Attributes Queried

Show Windows behavior

Section Activities

Sections loaded by Windows

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Mutex Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

Process Created

Process Queried

Process Information Set

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 1360, Parent PID: 1988

Function Logs

General

Target ID:	17
Start time:	10:06:22
Start date:	20/03/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff62a120000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

Volume Information Queried

Show Windows behavior

Section Activities

Sections loaded by Windows

Sections loaded by Program

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Mutex Activities

Mutex Created

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Thread Activities

Thread Created

Thread Delayed

Thread Information Set

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

Window Created

Window UI Enumerated

Message Posted to Windows UI

Window UIs Event Hook Set

Show Windows behavior

LPC Port Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: nslookup.exePID: 4328, Parent PID: 1988

Function Logs

General

Target ID:	20
Start time:	10:06:46
Start date:	20/03/2025
Path:	C:\Windows\System32\nslookup.exe
Wow64 process (32bit):	false
Commandline:	nslookup 142.202.190.19
Imagebase:	0x7ff7faf40000
File size:	89'600 bytes
MD5 hash:	F2E3950C1023ACF80765C918791999C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

File Written

Show Windows behavior

Section Activities

Sections loaded by Windows

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Mutex Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Thread Activities

Thread Information Set

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

System Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://142.202.190.19

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

\Device\ConDrv

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

Windows Analysis Report
http://142.202.190.19