Edit tour

Windows Analysis Report
PURCHASE ORDER 5172025.xla.xlsx

Overview

General Information

Sample name:	PURCHASE ORDER 5172025.xla.xlsx
Analysis ID:	1648273
MD5:	e79caec024d0abddc288e30c2c974945
SHA1:	2e56b64b76874ae950f7d71b115fff184e0b33f3
SHA256:	fb12a393e8260ef0e83bb670f86e19ce598b14bb9bbb8f90d27b573a310180f5
Tags:	xlaxlsxuser-abuse_ch
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Document contains embedded VBA macros

Document embeds suspicious OLE2 link

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Suricata IDS alerts with low severity for network traffic

Unable to load, office file is protected or invalid

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 6276 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 1872 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

EXCEL.EXE (PID: 2684 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\PURCHASE ORDER 5172025.xla.xlsx" MD5: 4A871771235598812032C822E6F68F19)

cleanup

Sigma Signatures

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.246.40, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 6276, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 49958

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.8, DestinationIsIpv6: false, DestinationPort: 49958, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 6276, Protocol: tcp, SourceIp: 13.107.246.40, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-25T17:58:01.509570+0100	2028371	3	Unknown Traffic	192.168.2.8	49958	13.107.246.40	443	TCP
2025-03-25T17:58:15.073312+0100	2028371	3	Unknown Traffic	192.168.2.8	49962	13.107.246.40	443	TCP
2025-03-25T17:58:15.076830+0100	2028371	3	Unknown Traffic	192.168.2.8	49963	13.107.246.40	443	TCP

Joe Sandbox Signatures

• AV Detection
• Compliance
• Software Vulnerabilities
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: PURCHASE ORDER 5172025.xla.xlsx	Virustotal: Detection: 28%			Perma Link
Source: PURCHASE ORDER 5172025.xla.xlsx	ReversingLabs: Detection: 22%

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.19.137.157:443 -> 192.168.2.8:49959 version: TLS 1.2

Source: global traffic	DNS query: name: otelrules.svc.static.microsoft
Source: global traffic	DNS query: name: otelrules.svc.static.microsoft
Source: global traffic	DNS query: name: t.emobility.energy

Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49736 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49738 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49737 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49739 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49740 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49742 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49741 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49744 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49743 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49745 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49746 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49747 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49748 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49749 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49750 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49751 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49752 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49753 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49754 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49755 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49756 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49757 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49758 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49759 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49760 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49761 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49762 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49764 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49765 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49763 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49766 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49767 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49768 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49769 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49770 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49771 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49772 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49773 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49774 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49775 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49776 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49778 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49779 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49780 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49777 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49782 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49783 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49784 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49785 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49786 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49781 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49787 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49788 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49789 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49790 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49791 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49792 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49793 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49794 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49795 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49797 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49798 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49796 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49799 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49800 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49801 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49802 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49803 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49804 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49805 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49806 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49808 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49809 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49807 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49810 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49811 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49812 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49813 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49814 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49815 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49816 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49817 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49818 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49819 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49820 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49821 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49822 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49823 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49824 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49825 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49826 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49828 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49829 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49831 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49827 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49832 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49830 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49833 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49834 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49835 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49836 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49837 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49838 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49839 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49840 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49841 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49843 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49844 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49845 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49842 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49846 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49847 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49849 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49851 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49852 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49853 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49850 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49854 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49855 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49856 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49857 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49859 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49858 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49860 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49861 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49862 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49863 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49864 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49865 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49866 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49867 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49868 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49869 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49871 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49870 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49872 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49873 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49874 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49875 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49876 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49877 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49878 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49879 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49880 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49881 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49882 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49883 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49885 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49886 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49884 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49887 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49888 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49889 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49890 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49891 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49892 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49893 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49894 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49895 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49896 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49897 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49898 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49899 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49900 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49901 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49902 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49903 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49904 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49906 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49905 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49909 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49908 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49910 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49911 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49912 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49913 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49914 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49907 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49915 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49917 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49916 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49919 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49918 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49920 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49921 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49922 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49923 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49924 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49926 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49925 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49927 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49928 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49931 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49930 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49932 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49933 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49929 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49934 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49935 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49936 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49937 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49938 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49939 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49941 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49942 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49943 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49940 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49944 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49945 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49946 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49947 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49948 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49950 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49951 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49953 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49954 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49949 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49955 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49956 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49952 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49957 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49958 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49959 -> 162.19.137.157:443
Source: global traffic	TCP traffic: 192.168.2.8:49960 -> 162.19.137.157:443
Source: global traffic	TCP traffic: 192.168.2.8:49962 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49963 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49736 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49736 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49736 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443

Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49708 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49708
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 192.168.2.8:49713 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49713
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 192.168.2.8:49712 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49712
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49709 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49709
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49711 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49711
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49710 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49710
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49714
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49715
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 192.168.2.8:49716 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49716
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49717
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49718
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49719
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49732
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49732
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49733
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49733
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 192.168.2.8:49731 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49731
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49734
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49734 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49734
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49732
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49732
Source: global traffic	TCP traffic: 192.168.2.8:49732 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49732
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49733
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49733
Source: global traffic	TCP traffic: 192.168.2.8:49733 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49733
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49730 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49730
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49735
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49735 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49735
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.246.40:443
Source: global traffic	TCP traffic: 13.107.246.40:443 -> 192.168.2.8:49723

Source: Joe Sandbox View	IP Address: 13.107.246.40 13.107.246.40
Source: Joe Sandbox View	IP Address: 13.107.246.40 13.107.246.40
Source: Joe Sandbox View	IP Address: 162.19.137.157 162.19.137.157

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49963 -> 13.107.246.40:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49958 -> 13.107.246.40:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49962 -> 13.107.246.40:443

Source: global traffic	HTTP traffic detected: GET /kqQ8bI HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: t.emobility.energyConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /404 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: t.emobility.energyConnection: Keep-Alive

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /kqQ8bI HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: t.emobility.energyConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /404 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: t.emobility.energyConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.svc.static.microsoft

Source: global traffic	DNS traffic detected: DNS query: otelrules.svc.static.microsoft
Source: global traffic	DNS traffic detected: DNS query: t.emobility.energy

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 16:58:06 GMTServer: Apache/2.4.62 (Debian)X-DNS-Prefetch-Control: offX-Frame-Options: SAMEORIGINStrict-Transport-Security: max-age=15552000; includeSubDomainsX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-Powered-By: Next.jsETag: "1225-4lR+8o8+z0M1Iq6OMuNgxAtPjT8"Content-Type: text/html; charset=utf-8Content-Length: 4645Vary: Accept-EncodingAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, AcceptConnection: close

Source: PURCHASE ORDER 5172025.xla.xlsx

String found in binary or memory: https://t.emobility.energy/kqQ8bIi

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.8:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.19.137.157:443 -> 192.168.2.8:49959 version: TLS 1.2

Source: PURCHASE ORDER 5172025.xla.xlsx

OLE indicator, VBA macros: true

Source: PURCHASE ORDER 5172025.xla.xlsx

Stream path 'MBD00A6776F/\x1Ole' : https://t.emobility.energy/kqQ8bIi2hA$9vM|"|^}2.p41=M[zTE^~Ii-=AX'drG|pB'$G*zFv\xwYYnBZX"]\Hl$WJd,W|JSA/g}]ZDLbT8cadBElRx8VvN0YMsRq2C5MysO17k8FR5MTlMPUIl5Z7ICcQOArkUAfAhKc9eA4ofQFw25yA/ *~S"i%S?

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Window title found: microsoft excel okexcel cannot open the file 'purchase order 5172025.xla.xlsx' because the file format or file extension is not valid. verify that the file has not been corrupted and that the file extension matches the format of the file.

Source: classification engine

Classification label: mal48.winXLSX@4/4@3/2

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\Desktop\~$PURCHASE ORDER 5172025.xla.xlsx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{40D718F0-92D8-4CFA-9D31-7278A9CA118B} - OProcSessId.dat

Jump to behavior

Source: PURCHASE ORDER 5172025.xla.xlsx

OLE indicator, Workbook stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: PURCHASE ORDER 5172025.xla.xlsx	Virustotal: Detection: 28%
Source: PURCHASE ORDER 5172025.xla.xlsx	ReversingLabs: Detection: 22%

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\PURCHASE ORDER 5172025.xla.xlsx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3EE60F5C-9BAD-4CD8-8E21-AD2D001D06EB}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: PURCHASE ORDER 5172025.xla.xlsx

Static file information: File size 1268224 > 1048576

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: PURCHASE ORDER 5172025.xla.xlsx

Initial sample: OLE indicators encrypted = True

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: PURCHASE ORDER 5172025.xla.xlsx	Stream path 'MBD00A6776E/Package' entropy: 7.99503474609 (max. 8.0)
Source: PURCHASE ORDER 5172025.xla.xlsx	Stream path 'Workbook' entropy: 7.99545252584 (max. 8.0)

Source: C:\Windows\splwow64.exe

Thread delayed: delay time: 120000

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	3 Exploitation for Client Execution	1 Scripting	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 System Information Discovery	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
PURCHASE ORDER 5172025.xla.xlsx	29%	Virustotal		Browse
PURCHASE ORDER 5172025.xla.xlsx	22%	ReversingLabs	Document-Excel.Exploit.CVE-2017-0199

Source	Detection	Scanner	Label	Link
https://t.emobility.energy/kqQ8bI	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
host1.emobility.energy	162.19.137.157	true	false	high
s-0005.dual-s-msedge.net	52.123.129.14	true	false	high
otelrules.svc.static.microsoft	unknown	unknown	false	high
t.emobility.energy	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/excel.exe-Production-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false		high
https://t.emobility.energy/kqQ8bI	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700500v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224902v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120651v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120402v21s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120642v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702950v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120629v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702651v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120623v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702201v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120658v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703951v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120676v0s19.xml	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.107.246.40	s-part-0012.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.19.137.157	host1.emobility.energy	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	false

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648273
Start date and time:	2025-03-25 17:55:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Without Instrumentation
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	PURCHASE ORDER 5172025.xla.xlsx
Detection:	MAL
Classification:	mal48.winXLSX@4/4@3/2
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Active ActiveX Object Active ActiveX Object Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 52.109.8.89, 184.31.69.3, 40.79.197.35, 52.109.8.36, 52.109.6.53, 20.50.80.209, 52.123.129.14, 4.245.163.56, 40.126.24.81
Excluded domains from analysis (whitelisted): onedscolprdjpe04.japaneast.cloudapp.azure.com, onedscolprdneu02.northeurope.cloudapp.azure.com, slscr.update.microsoft.com, cus-config.officeapps.live.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, mobile.events.data.microsoft.com, roaming.officeapps.live.com, dual-s-0005-office.config.skype.com, osiprod-cus-buff-azsc-000.centralus.cloudapp.azure.com, login.live.com, eus2-azsc-config.officeapps.live.com, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, c.pki.goog, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akadns.net, cus-azsc-000.roaming.officeapps.live.com, fe3cr.delivery.mp.microsoft.com, us1.roaming1.live.com.akadns.net, config.officeapps.live.com, us.configsvc1.live.com.akadns.net, ecs.office.trafficmanager.net, mobile
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
12:58:13	API Interceptor	15x Sleep call for process: splwow64.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.40	Payment Transfer Receipt.shtml	Get hash	malicious	HTMLPhisher	Browse	www.aib.gov.uk/
	NEW ORDER.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zs
	PO_OCF 408.xls	Get hash	malicious	Unknown	Browse	2s.gg/42Q
	06836722_218 Aluplast.docx.doc	Get hash	malicious	Unknown	Browse	2s.gg/3zk
	Quotation.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zM
162.19.137.157	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse
	Untitled_20250325.docx.doc	Get hash	malicious	Unknown	Browse
	Untitled_20250325.docx.doc	Get hash	malicious	Unknown	Browse
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse
	BL 248436935 CNTR MRKU9180226.docx.doc	Get hash	malicious	Unknown	Browse
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse
	BL 248436935 CNTR MRKU9180226.docx.doc	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-0005.dual-s-msedge.net	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	52.123.128.14
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	52.123.128.14
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	52.123.128.14
	Purchase Order 40360414.doc	Get hash	malicious	Unknown	Browse	52.123.128.14
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	52.123.129.14
	Purchase Order 40360414.doc	Get hash	malicious	Unknown	Browse	52.123.128.14
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	52.123.129.14
	Shitstain.exe	Get hash	malicious	AnarchyGrabber, AsyncRAT, DBatLoader, Discord Token Stealer, FritzFrog, HawkEye, Lokibot	Browse	52.123.128.14
host1.emobility.energy	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	Untitled_20250325.docx.doc	Get hash	malicious	Unknown	Browse	162.19.137.157
	Untitled_20250325.docx.doc	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	BL 248436935 CNTR MRKU9180226.docx.doc	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	BL 248436935 CNTR MRKU9180226.docx.doc	Get hash	malicious	Unknown	Browse	162.19.137.157
s-part-0012.t-0009.t-msedge.net	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	http://loginmlcrosoftonline365.utzsnacks.com.ribeiroautocapas.com.br/cgi-bin/reset/authorize?email=priceandpromosupport@utzsnacks.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	AliareV0.1.exe	Get hash	malicious	PureLog Stealer, XWorm	Browse	13.107.246.40
	Review requested on PROJECT_PROPOSAL_Mutual_NDA_25.03.25_PDF (107Ko).msg	Get hash	malicious	Unknown	Browse	13.107.246.40
	https://x.to0wfnubykn8.ru/hjkewtr/hgjtyu.html	Get hash	malicious	Unknown	Browse	13.107.246.40

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CENTURYLINK-US-LEGACY-QWESTUS	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	arm7.elf	Get hash	malicious	Okiru	Browse	97.112.45.135
	https://promo-offer.site/tnf_pt	Get hash	malicious	Unknown	Browse	162.19.138.82
	https://antiphishing.vadesecure.com/v4?f=NFZ1OXFVNUpJaXhxbWN3aw79TqTxGVr5HS_rj8xy-Dtt3WuOYgiNsT7kSrCL4neS&i=dnZZY1BRdGVud2p5a3J2MkXgKVQslibyjliaROaA9Kc&k=ylKZ&r=eVhRazAzQWpzQlVhVVRabfl7Btopt7tCs6Jhtvvo_JQliQyVoVTnThNthFfLLOv7XziSix9lmqfR7qqdZtpsOw&s=427052c2cb55a4ea4f9c70929c499bda58414514c5d12af8c66341946b20b817&u=https%3A%2F%2Fzmk5ybt5uw.us-east-1.awsapprunner.com%2F%23Xavier.Regnault%40chantiers-atlantique.com	Get hash	malicious	HTMLPhisher	Browse	162.19.59.195
	Untitled_20250325.docx.doc	Get hash	malicious	Unknown	Browse	162.19.137.157
	Untitled_20250325.docx.doc	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
MICROSOFT-CORP-MSN-AS-BLOCKUS	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.72
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	arm.elf	Get hash	malicious	Gafgyt, Okiru	Browse	20.192.11.71
	ppc.elf	Get hash	malicious	Okiru	Browse	40.122.145.102
	m68k.elf	Get hash	malicious	Gafgyt, Okiru	Browse	51.120.229.61

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS	Browse	13.107.246.40
	#Ud83d#Udd0aAudio_Msg Junklessfoods.xhtml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	https://serviceauthfoap.com/%20#%20I%20am%20not%20a%20robot:%20Cloudflare%20Verification%20ID:%2077FA-YOX	Get hash	malicious	Unknown	Browse	13.107.246.40
	34209QB_EFT_Payment_Statemt25.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	13.107.246.40
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	13.107.246.40
	Legal_Notice_Presentation.pptx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	750413b4e6897a671bc759e04597952a0be747830189873b.bin.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.40
	https://jainiklifesciences.com/proposals	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	https://sallybarmescounsellor.co.uk/pad4.pdf	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	13.107.246.40
	http://hdm.bdienzelsex.com	Get hash	malicious	Unknown	Browse	13.107.246.40
6271f898ce5be7dd52b0fc260d0662b3	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	SecuriteInfo.com.Other.Malware-gen.24773.2907.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	SecuriteInfo.com.Other.Malware-gen.24773.2907.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PRE#U00c7O - RFQ 674441-76450.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
	PRE#U00c7O - RFQ 674441-76450.xla.xlsx	Get hash	malicious	Unknown	Browse	162.19.137.157
a0e9f5d64349fb13191bc781f81f42e1	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE ORDER 420-2025.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	temp_error_logs.scr.exe	Get hash	malicious	Unknown	Browse	13.107.246.40
	temp_error_logs.scr.exe	Get hash	malicious	Unknown	Browse	13.107.246.40
	ASIr1Bo2x9.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.40
	ySTYvI9Pvk.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.40
	6aOM10d2pR.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.40
	Ec0AgD2t1q.exe	Get hash	malicious	DarkVision Rat	Browse	13.107.246.40

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\Local\Temp\5A759A18.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	794
Entropy (8bit):	2.7142819241824805
Encrypted:	false
SSDEEP:	24:YIrNvpKAzLtwcfHGF8AJp9WtAZRJ5poIHWI:YmbfzLSc88AJtfJ52IHV
MD5:	BD9E767E74B38030B097E6FED6464EB5
SHA1:	03D9E758B4DB2B6E922BBBDE189C210AF676C648
SHA-256:	4FCDC40B7579E1C625A21D9BD14B898D8854FE812BF76BB31D077E39E2FAF6B2
SHA-512:	61FE087E54A696C70F69827B2136E8E34380F99FE5EFFB38392CF33C26D421B5ECF2A19EE041BD0BEC944412CCC6E8912DEFFBE15A0B77A20184F31BB6C794A5
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	3.7.4.6.3.7.6.,.1.1.9.6.3.7.8.,.1.7.8.8.6.5.8.,.2.5.5.0.5.0.8.8.,.1.2.5.,.1.1.9.,.3.0.0.4.9.2.6.8.,.;.3.2.9.4.5.8.7.9.9.,.3.7.4.6.3.7.8.,.6.3.6.4.3.3.4.,.3.0.1.5.3.7.2.1.,.2.3.7.1.6.5.1.,.1.0.0.1.,.6.5.4.0.2.1.5.,.2.4.6.0.9.2.5.8.,.4.0.6.9.3.5.8.2.,.1.0.4.9.5.2.3.4.,.6.3.6.4.3.1.8.,.3.0.1.2.3.4.6.6.,.2.7.1.5.3.4.9.7.,.6.3.7.1.6.9.4.,.5.9.2.2.3.4.2.3.,.5.7.9.9.9.6.6.1.,.1.5.6.1.9.5.8.,.6.3.0.6.3.0.9.9.,.2.7.3.6.0.0.9.5.,.5.8.4.2.5.8.6.0.,.6.3.6.4.3.3.7.,.6.1.7.0.7.3.0.7.,.6.3.6.4.3.3.0.,.6.3.6.4.3.3.1.,.6.7.4.8.3.9.6.1.4.,.3.3.7.9.1.6.2.,.4.7.3.8.2.9.4.8.,.1.6.5.7.4.5.3.,.1.0.6.9.5.5.2.,.1.6.5.7.4.5.2.,.5.2.9.1.0.0.0.0.,.1.3.5.2.5.8.6.,.1.3.5.2.5.8.7.,.1.7.7.1.6.5.7.,.1.0.2.3.8.6.4.,.1.0.2.3.6.3.8.,.6.3.7.1.6.9.5.,.4.8.1.9.5.5.3.8.,.1.4.6.1.9.5.3.,.6.3.6.4.3.3.2.,.3.2.0.5.9.2.7.6.7.,.

C:\Users\user\AppData\Local\Temp\~DF0B01E49FE462D030.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\~$PURCHASE ORDER 5172025.xla.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:WH25nJFV:WH2/
MD5:	FB5ABAA34A0BB284B640327B9745AAAC
SHA1:	7E1063A0F1DE0E83424399F104C1D3752BFAECDE
SHA-256:	12464C713EE2E0CBBDCF98FACF8AC034D34A9F4D221D7BB7A5C7D458AAEC0AF9
SHA-512:	0FB235A4475D72D9BB6A195F6DFE471152B91F6DE0967D4174298D0A3C228BFF0ED57F0A5F388833A7793BD90F6CA0D5A974D21D795938D8D96C079AB5D99294
Malicious:	true
Preview:	.user ..h.u.b.e.r.t. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Tue Mar 25 10:25:39 2025, Security: 1
Entropy (8bit):	7.982615142561084
TrID:	Microsoft Excel sheet (30009/1) 47.99% Microsoft Excel sheet (alternate) (24509/1) 39.20% Generic OLE2 / Multistream Compound File (8008/1) 12.81%
File name:	PURCHASE ORDER 5172025.xla.xlsx
File size:	1'268'224 bytes
MD5:	e79caec024d0abddc288e30c2c974945
SHA1:	2e56b64b76874ae950f7d71b115fff184e0b33f3
SHA256:	fb12a393e8260ef0e83bb670f86e19ce598b14bb9bbb8f90d27b573a310180f5
SHA512:	b4870c6be966a5c016f5a16d911bfb792c43a6f1c78b8cfe34bf989e01479ed4b845dfd9d356303985063988d8f18524cfe65abe08d68ffd851fdbb927bb2267
SSDEEP:	24576:YN/dT0Hr47PD4UTqRgJ+pn0M9cWNVDfrsnlf:YNFTs4DD4hg00MtDDTM1
TLSH:	694523A87BC1CFA6C5FB55FD48A6A9154006FCC0A26B97477241B7CE7530378838B68B
File Content Preview:	........................>...................................v...................................................................................y.......{......................................................................................................

File Icon


Icon Hash:	35e58a8c0c8a85b9

Static OLE Info

General

Document Type:	OLE
Number of OLE Files:	1

OLE File "PURCHASE ORDER 5172025.xla.xlsx"

Indicators

Has Summary Info:
Application Name:	Microsoft Excel
Encrypted Document:	True
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Code Page:	1252
Author:
Last Saved By:
Create Time:	2006-09-16 00:00:00
Last Saved Time:	2025-03-25 10:25:39
Creating Application:	Microsoft Excel
Security:	1

Document Summary

Document Code Page:	1252
Thumbnail Scaling Desired:	False
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	786432

Streams with VBA

VBA File Name: Sheet1.cls, Stream Size: 977

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Sheet1
VBA File Name:	Sheet1.cls
Stream Size:	977
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 bd e1 ca 7f 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: Sheet2.cls, Stream Size: 977

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Sheet2
VBA File Name:	Sheet2.cls
Stream Size:	977
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . @ . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 bd e1 e5 40 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: Sheet3.cls, Stream Size: 977

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Sheet3
VBA File Name:	Sheet3.cls
Stream Size:	977
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . i . . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - .
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 bd e1 69 15 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: ThisWorkbook.cls, Stream Size: 985

General
Stream Path:	_VBA_PROJECT_CUR/VBA/ThisWorkbook
VBA File Name:	ThisWorkbook.cls
Stream Size:	985
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . t 1 . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 1 . 9 . - .
Data Raw:	01 16 01 00 00 f0 00 00 00 c4 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff cb 02 00 00 1f 03 00 00 00 00 00 00 01 00 00 00 bd e1 74 31 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 114

General
Stream Path:	\x1CompObj
CLSID:
File Type:	data
Stream Size:	114
Entropy:	4.25248375192737
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . . . F & . . . M i c r o s o f t O f f i c e E x c e l 2 0 0 3 W o r k s h e e t . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 26 00 00 00 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 45 78 63 65 6c 20 32 30 30 33 20 57 6f 72 6b 73 68 65 65 74 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 244

General
Stream Path:	\x5DocumentSummaryInformation
CLSID:
File Type:	data
Stream Size:	244
Entropy:	2.889430592781307
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . H . . . . . . . P . . . . . . . X . . . . . . . ` . . . . . . . h . . . . . . . p . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S h e e t 1 . . . . . S h e e t 2 . . . . . S h e e t 3 . . . . . . . . . . . . . . . . . W o r k s h e e t s . . . . . . . . .
Data Raw:	fe ff 00 00 06 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c4 00 00 00 08 00 00 00 01 00 00 00 48 00 00 00 17 00 00 00 50 00 00 00 0b 00 00 00 58 00 00 00 10 00 00 00 60 00 00 00 13 00 00 00 68 00 00 00 16 00 00 00 70 00 00 00 0d 00 00 00 78 00 00 00 0c 00 00 00 a1 00 00 00 02 00 00 00 e4 04 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 200

General
Stream Path:	\x5SummaryInformation
CLSID:
File Type:	data
Stream Size:	200
Entropy:	3.2603503175049817
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . T . . . . . . . ` . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . \| . # . @ . . . S . A p . . . . . . . . .
Data Raw:	fe ff 00 00 06 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 98 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 54 00 00 00 12 00 00 00 60 00 00 00 0c 00 00 00 78 00 00 00 0d 00 00 00 84 00 00 00 13 00 00 00 90 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 04 00 00 00

Stream Path: MBD00A6776E/\x1CompObj, File Type: data, Stream Size: 99

General
Stream Path:	MBD00A6776E/\x1CompObj
CLSID:
File Type:	data
Stream Size:	99
Entropy:	3.631242196770981
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . ! . . . M i c r o s o f t O f f i c e E x c e l W o r k s h e e t . . . . . E x c e l M L 1 2 . . . . . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 00 00 00 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 45 78 63 65 6c 20 57 6f 72 6b 73 68 65 65 74 00 0a 00 00 00 45 78 63 65 6c 4d 4c 31 32 00 00 00 00 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: MBD00A6776E/Package, File Type: Microsoft Excel 2007+, Stream Size: 1099154

General
Stream Path:	MBD00A6776E/Package
CLSID:
File Type:	Microsoft Excel 2007+
Stream Size:	1099154
Entropy:	7.995034746087403
Base64 Encoded:	True
Data ASCII:	P K . . . . . . . . . . ! . w 1 . . . . j . . . . . . [ C o n t e n t _ T y p e s ] . x m l . ( . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	50 4b 03 04 14 00 06 00 08 00 00 00 21 00 77 31 d5 0e e3 01 00 00 6a 08 00 00 13 00 cd 01 5b 43 6f 6e 74 65 6e 74 5f 54 79 70 65 73 5d 2e 78 6d 6c 20 a2 c9 01 28 a0 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: MBD00A6776F/\x1Ole, File Type: data, Stream Size: 494

General
Stream Path:	MBD00A6776F/\x1Ole
CLSID:
File Type:	data
Stream Size:	494
Entropy:	5.845279778686223
Base64 Encoded:	False
Data ASCII:	. . . . H . . . . . . . . . . . . . . . . . y . . . K . . . . h . t . t . p . s . : . / . / . t . . . e . m . o . b . i . l . i . t . y . . . e . n . e . r . g . y . / . k . q . Q . 8 . b . I . . . i 2 h A $ . 9 v . M . \| " \| . ^ } . . . 2 . . p 4 1 = M [ z T E ^ ~ I i . - = . A X ' ` . . r G \| p . B ' $ G * z F v . \\ x w Y Y n B Z X " ] \\ H . l $ W J d , W \| J . S A / g } . ] . . . . . . . . . . . . . . . . . . . Z . D . L . b . T . 8 . c . a . d . B . E . l . R . x . 8 . V . v . N . 0 . Y . M . s . R .
Data Raw:	01 00 00 02 8f 48 a6 20 03 b0 a1 13 00 00 00 00 00 00 00 00 00 00 00 00 f6 00 00 00 e0 c9 ea 79 f9 ba ce 11 8c 82 00 aa 00 4b a9 0b f2 00 00 00 68 00 74 00 74 00 70 00 73 00 3a 00 2f 00 2f 00 74 00 2e 00 65 00 6d 00 6f 00 62 00 69 00 6c 00 69 00 74 00 79 00 2e 00 65 00 6e 00 65 00 72 00 67 00 79 00 2f 00 6b 00 71 00 51 00 38 00 62 00 49 00 00 00 69 df 32 68 8c dc 41 24 13 39 fb 76

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 144844

General
Stream Path:	Workbook
CLSID:
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	144844
Entropy:	7.99545252584344
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . / . 6 . . . . . . . . ; / @ ] ; ] X . . . 2 z u : Z 6 . : . ~ . : @ D o . * E . ~ } . . . . . . . . . . . U . . . \\ . p . . W g b O . l N f y I . : ~ . . . U 6 . p ; Z z " N 3 j ] > . ` , . 4 . 0 . # ^ . F v ! . g e b e V q . T o . . C h G B . . . a . . . " . . . = . . . . x . . . n Y : . . ; o . j . . . . . . . . . . . y a . . . . w . . . . . . . = . . . X ^ . . ? O 5 . i G @ . . . . . . . } " . . . L r . . . . . . . r . . . A 1 . . . w R ? ( Y " G j k r . . > . e . 1 .
Data Raw:	09 08 10 00 00 06 05 00 ab 1f cd 07 c1 00 01 00 06 04 00 00 2f 00 36 00 01 00 01 00 01 00 18 3b 2f 40 f2 5d 3b 5d 58 d7 9a 01 ef cf 85 ec 32 7a af 75 3a 5a e4 f3 36 d5 a5 3a 1d 7e 7f 3a 84 40 ac 44 6f 0e 2a 9a 20 45 f5 dc 9a 7e 7d 12 87 00 00 00 e1 00 02 00 b0 04 c1 00 02 00 55 b0 e2 00 00 00 5c 00 70 00 aa b5 e6 a6 b9 f0 57 67 62 94 4f 1b ba 6c 4e d1 cb d8 66 f9 e2 79 b6 a0 49 d8

Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 531

General
Stream Path:	_VBA_PROJECT_CUR/PROJECT
CLSID:
File Type:	ASCII text, with CRLF line terminators
Stream Size:	531
Entropy:	5.22065657326829
Base64 Encoded:	True
Data ASCII:	I D = " { 1 2 F 7 0 6 2 C - 6 A 4 9 - 4 1 0 5 - B F D 6 - F 4 8 3 3 1 8 3 3 3 5 E } " . . D o c u m e n t = T h i s W o r k b o o k / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 1 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 2 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 3 / & H 0 0 0 0 0 0 0 0 . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 7 C 5 6 C A 4 9 4 A C 6 C B 0 6
Data Raw:	49 44 3d 22 7b 31 32 46 37 30 36 32 43 2d 36 41 34 39 2d 34 31 30 35 2d 42 46 44 36 2d 46 34 38 33 33 31 38 33 33 33 35 45 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 54 68 69 73 57 6f 72 6b 62 6f 6f 6b 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 32 2f 26 48 30 30 30

Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 104

General
Stream Path:	_VBA_PROJECT_CUR/PROJECTwm
CLSID:
File Type:	data
Stream Size:	104
Entropy:	3.0488640812019017
Base64 Encoded:	False
Data ASCII:	T h i s W o r k b o o k . T . h . i . s . W . o . r . k . b . o . o . k . . . S h e e t 1 . S . h . e . e . t . 1 . . . S h e e t 2 . S . h . e . e . t . 2 . . . S h e e t 3 . S . h . e . e . t . 3 . . . . .
Data Raw:	54 68 69 73 57 6f 72 6b 62 6f 6f 6b 00 54 00 68 00 69 00 73 00 57 00 6f 00 72 00 6b 00 62 00 6f 00 6f 00 6b 00 00 00 53 68 65 65 74 31 00 53 00 68 00 65 00 65 00 74 00 31 00 00 00 53 68 65 65 74 32 00 53 00 68 00 65 00 65 00 74 00 32 00 00 00 53 68 65 65 74 33 00 53 00 68 00 65 00 65 00 74 00 33 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2644

General
Stream Path:	_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
CLSID:
File Type:	data
Stream Size:	2644
Entropy:	3.989996811732665
Base64 Encoded:	False
Data ASCII:	a . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 0 . # . 9 . # . C . : . \\ . P . R . O . G . R . A . ~ . 2 . \\ . C . O . M . M . O . N . ~ . 1 . \\ . M . I . C . R . O . S . ~ . 1 . \\ . V . B . A . \\ . V . B . A . 6 . \\ . V . B . E . 6 . . . D . L . L . # . V . i . s . u . a . l . . B . a . s . i . c . . F . o . r .
Data Raw:	cc 61 88 00 00 01 00 ff 09 40 00 00 09 04 00 00 e4 04 01 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 fa 00 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 30 00 23 00

Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 553

General
Stream Path:	_VBA_PROJECT_CUR/VBA/dir
CLSID:
File Type:	data
Stream Size:	553
Entropy:	6.357006260243376
Base64 Encoded:	True
Data ASCII:	. % . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . S . i . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s W O W 6 4 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2
Data Raw:	01 25 b2 80 01 00 04 00 00 00 01 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 53 12 fa 69 08 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-25T17:58:01.509570+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49958	13.107.246.40	443	TCP
2025-03-25T17:58:15.073312+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49962	13.107.246.40	443	TCP
2025-03-25T17:58:15.076830+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49963	13.107.246.40	443	TCP

Network Port Distribution

Total Packets: 2283
• 443 (HTTPS)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 17:57:21.301137924 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.301186085 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.301275015 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.301484108 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.301497936 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.622162104 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.622272968 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.630623102 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.630654097 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.630935907 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.633466959 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.676278114 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.933491945 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.933557987 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.933603048 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.933655024 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.933710098 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.933741093 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.933759928 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.965886116 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.965939999 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.965991020 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.966028929 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:21.966043949 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:21.966309071 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.043591022 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.043668032 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.043737888 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.043773890 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.043788910 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.044200897 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.156338930 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156388044 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156454086 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156522036 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.156547070 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156574965 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.156583071 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156599998 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156640053 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156656981 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.156663895 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.156686068 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.156721115 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.251627922 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.251652956 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.251745939 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.251775980 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.251842022 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.281874895 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.281898975 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.281943083 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.281944036 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.281964064 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.281968117 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.281986952 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.282037020 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.286124945 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.286140919 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.286267042 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.286267042 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.286295891 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.337683916 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.340606928 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.340636015 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.340687990 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.340701103 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.340754986 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.344173908 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.373519897 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.373552084 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.373677015 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.373698950 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.373744011 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.384448051 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.384531975 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.384584904 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.384644985 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.384932995 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.384953022 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.384968996 CET	49708	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.384974957 CET	443	49708	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.435801983 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.435853004 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.435935020 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.439527035 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.439558983 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.439625025 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440089941 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440108061 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440131903 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440154076 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440198898 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440234900 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440247059 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440284967 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440334082 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440516949 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440530062 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440643072 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440659046 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440701962 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440717936 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440757036 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440759897 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.440768957 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.440768957 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.741856098 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.742558002 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.742571115 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.742857933 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.743179083 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.743201971 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.743240118 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.743243933 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.743654013 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.743659019 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.749031067 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.749217033 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.749727011 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.749747992 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.749767065 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.749808073 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.750144005 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.750150919 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.750272036 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.750278950 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.761385918 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.761921883 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.761944056 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.762465954 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.762470961 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.939515114 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.939732075 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.939815044 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.939907074 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.939925909 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.939937115 CET	49713	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.939943075 CET	443	49713	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.943149090 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.943180084 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.943317890 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.943527937 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.943540096 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.950491905 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.950577974 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.950635910 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.950860977 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.950875998 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.950887918 CET	49712	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.950894117 CET	443	49712	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.953684092 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.953720093 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.953824997 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.954024076 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.954040051 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.962054014 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.962088108 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.962193012 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.962202072 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.962261915 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.962527990 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.962548018 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.962575912 CET	49709	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.962580919 CET	443	49709	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.965933084 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.965965986 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.966043949 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.966176987 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.966197014 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.980057955 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.980129957 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.980180979 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.982681990 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.982711077 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.982722998 CET	49711	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.982728958 CET	443	49711	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.985378981 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.985409975 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:22.985495090 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.985646009 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:22.985656977 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.044900894 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.044922113 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.044972897 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.045036077 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.045056105 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.045495033 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.045495033 CET	49710	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.045516014 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.045523882 CET	443	49710	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.048563004 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.048603058 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.048702002 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.048928976 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.048947096 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.248621941 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.249172926 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.249188900 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.249694109 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.249706030 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.257930994 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.258548021 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.258563042 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.259149075 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.259152889 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.270746946 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.271281958 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.271291018 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.271841049 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.271846056 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.299309969 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.299850941 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.299868107 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.300405025 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.300409079 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.358505964 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.363895893 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.363909960 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.364382982 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.364388943 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.449398041 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.450067043 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.450151920 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.450216055 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.450216055 CET	49714	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.450229883 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.450239897 CET	443	49714	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.453469992 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.453496933 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.453588963 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.453752995 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.453767061 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.459239960 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.459908009 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.459997892 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.460043907 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.460057020 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.460071087 CET	49715	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.460076094 CET	443	49715	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.463006973 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.463048935 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.463133097 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.463294029 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.463304996 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.469502926 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.469711065 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.469765902 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.469804049 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.469809055 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.469824076 CET	49716	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.469827890 CET	443	49716	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.472551107 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.472598076 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.472780943 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.472840071 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.472857952 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.515538931 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.515618086 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.515803099 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.515945911 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.515945911 CET	49717	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.515960932 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.515975952 CET	443	49717	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.519064903 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.519112110 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.519211054 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.519376040 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.519388914 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.561141968 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.561237097 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.561289072 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.561538935 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.561554909 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.561568022 CET	49718	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.561575890 CET	443	49718	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.564663887 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.564706087 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.564774990 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.565089941 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.565102100 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.757479906 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.758227110 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.758263111 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.758584976 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.758591890 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.777415991 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.777971983 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.778006077 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.778567076 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.778573990 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.784943104 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.785415888 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.785429001 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.785938978 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.785944939 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.821166992 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.821758032 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.821789980 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.822297096 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.822304964 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.970952034 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.971087933 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.971151114 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.971281052 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.971297026 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.971306086 CET	49719	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.971311092 CET	443	49719	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.974247932 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.974294901 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.974381924 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.974560976 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.974579096 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.976500034 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.976576090 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.976623058 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.976738930 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.976756096 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.976767063 CET	49720	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.976772070 CET	443	49720	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.979729891 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.979764938 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.979834080 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.980005980 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.980019093 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.992495060 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.992573023 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.992681026 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.993077040 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.993077040 CET	49721	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.993098021 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.993107080 CET	443	49721	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.996798038 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.996833086 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:23.996937037 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.997221947 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:23.997232914 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.048585892 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.048660994 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.048758984 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.048999071 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.049019098 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.049030066 CET	49722	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.049036026 CET	443	49722	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.052505970 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.052555084 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.052642107 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.052875042 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.052885056 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.290381908 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.291155100 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.291181087 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.291579962 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.291584969 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.291980982 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.292390108 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.292408943 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.292720079 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.292726040 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.302489042 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.303028107 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.303069115 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.303498030 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.303514004 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.355011940 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.355674982 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.355714083 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.356232882 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.356240034 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.488620043 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.488696098 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.488888979 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.489043951 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.489064932 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.489077091 CET	49725	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.489083052 CET	443	49725	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.492182970 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.492209911 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.492290020 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.492367029 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.492490053 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.492505074 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.492568970 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.492628098 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.492674112 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.492674112 CET	49724	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.492690086 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.492701054 CET	443	49724	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.495069981 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.495110035 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.495177031 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.495425940 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.495443106 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.514410973 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.514487982 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.514553070 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.519062042 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.519062042 CET	49726	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.519081116 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.519094944 CET	443	49726	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.521814108 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.521847010 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.522017002 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.522161961 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.522176981 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.550080061 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.550175905 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.550257921 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.550467014 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.550493956 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.550506115 CET	49727	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.550512075 CET	443	49727	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.553138971 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.553168058 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.553378105 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.553560019 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.553574085 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.795488119 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.796279907 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.796293020 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.796597958 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.796602964 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.798094988 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.798584938 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.798646927 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.798888922 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.798903942 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.857950926 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.858561039 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.858577967 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:24.858985901 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:24.858992100 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.001859903 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.001935005 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.002058983 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.002273083 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.002273083 CET	49729	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.002324104 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.002353907 CET	443	49729	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.004040956 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.005016088 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.005522966 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.005548954 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.005551100 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.005631924 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.005753040 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.005753040 CET	49728	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.005764961 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.005773067 CET	443	49728	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.005824089 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.005837917 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.007874966 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.007914066 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.008002043 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.008155107 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.008168936 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.128786087 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.129468918 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.129479885 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.130312920 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.130317926 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.251542091 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.253266096 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.253335953 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.253381014 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.253396034 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.253407001 CET	49731	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.253412008 CET	443	49731	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.256104946 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.256194115 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.256289959 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.256416082 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.256432056 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.315017939 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.315726042 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.315736055 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.316278934 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.316282988 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.317454100 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.317969084 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.317990065 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.318469048 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.318473101 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.331106901 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.331191063 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.331254005 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.331588030 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.331588030 CET	49730	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.331604004 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.331612110 CET	443	49730	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.334536076 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.334573030 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.334666014 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.334866047 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.334882021 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.411142111 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.413810015 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.413836956 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.414238930 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.414243937 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.522226095 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.522300959 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.522392035 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.522612095 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.522633076 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.522645950 CET	49733	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.522651911 CET	443	49733	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.526134968 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.526175976 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.526235104 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.526381016 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.526395082 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.589865923 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.589978933 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.590039015 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.590219975 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.590238094 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.590251923 CET	49732	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.590260029 CET	443	49732	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.593702078 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.593751907 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.593822956 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.594091892 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.594104052 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.612128973 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.619246960 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.619307995 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.619431973 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.619450092 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.619462967 CET	49723	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.619467974 CET	443	49723	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.622303963 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.622345924 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.622411966 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.622571945 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.622582912 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.636295080 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.636838913 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.636857986 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.637494087 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.637500048 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.850477934 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.850809097 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.850863934 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.850902081 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.850919008 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.850929976 CET	49735	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.850935936 CET	443	49735	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.854435921 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.854474068 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.854549885 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.854676962 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.854691029 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.892713070 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.893373966 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.893404007 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.893824100 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.893829107 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.931138992 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.931776047 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.931802034 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.932192087 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.932195902 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.966571093 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.967116117 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.967145920 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:25.967545033 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:25.967550993 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.007848978 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.008487940 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.008517981 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.008918047 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.008922100 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.099179983 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.099256039 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.099340916 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.099596977 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.099626064 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.099637985 CET	49736	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.099643946 CET	443	49736	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.102631092 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.102672100 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.102837086 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.102979898 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.102993965 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.132797003 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.133194923 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.133284092 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.133332014 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.133347988 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.133359909 CET	49738	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.133366108 CET	443	49738	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.137355089 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.137378931 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.137459993 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.137636900 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.137646914 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.159032106 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.159600973 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.159631014 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.160279989 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.160285950 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.165900946 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.165971994 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.166035891 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.166125059 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.166145086 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.166156054 CET	49734	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.166162014 CET	443	49734	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.168972015 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.169006109 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.169101954 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.169321060 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.169332981 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.206598043 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.206995964 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.207087040 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.207123041 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.207140923 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.207151890 CET	49737	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.207156897 CET	443	49737	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.209752083 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.209794998 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.209861994 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.210004091 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.210016966 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.361459970 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.361557007 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.361665010 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.361756086 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.361756086 CET	49739	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.361776114 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.361784935 CET	443	49739	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.364744902 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.364795923 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.364901066 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.365022898 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.365045071 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.402750969 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.403321981 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.403348923 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.404017925 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.404026985 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.469912052 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.470362902 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.470390081 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.470813990 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.470822096 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.576428890 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.577059031 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.577086926 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.577513933 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.577521086 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.607156038 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.607244968 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.607305050 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.607503891 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.607503891 CET	49740	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.607530117 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.607539892 CET	443	49740	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.610600948 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.610637903 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.610716105 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.610901117 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.610913038 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.670756102 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.670828104 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.670876026 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.671097994 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.671113014 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.671124935 CET	49742	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.671129942 CET	443	49742	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.674120903 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.674850941 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.674866915 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.675254107 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.675261974 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.676475048 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.676505089 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.676558971 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.676789045 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.676799059 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.776628971 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.776715040 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.776793957 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.776971102 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.776992083 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.777004004 CET	49741	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.777009964 CET	443	49741	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.779684067 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.779714108 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.779804945 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.779961109 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.779969931 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.817095995 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.817693949 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.817728043 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.818263054 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.818268061 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.883306980 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.883877039 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.884457111 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.884457111 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.884457111 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.887129068 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.887162924 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.887265921 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.887437105 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.887449026 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.914211035 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.914839029 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.914879084 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.915483952 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.915504932 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.981657028 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.982383966 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.982399940 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:26.982706070 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:26.982711077 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.016823053 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.017379999 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.017442942 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.017484903 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.017507076 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.017520905 CET	49743	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.017528057 CET	443	49743	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.021433115 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.021470070 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.021548986 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.021708012 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.021719933 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.118352890 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.118865013 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.118973970 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.119235992 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.119995117 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.120012045 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.120023966 CET	49745	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.120029926 CET	443	49745	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.121540070 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.121566057 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.121948004 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.121954918 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.124121904 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.124145031 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.124258041 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.124370098 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.124383926 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.183303118 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.183739901 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.183815002 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.183857918 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.183871984 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.183907986 CET	49746	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.183912992 CET	443	49746	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.186567068 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.186594963 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.186669111 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.186830044 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.186846018 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.193898916 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.194333076 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.194356918 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.194773912 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.194780111 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.197092056 CET	49744	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.197104931 CET	443	49744	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.320965052 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.321297884 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.321403027 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.321430922 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.321449995 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.321461916 CET	49747	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.321468115 CET	443	49747	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.323360920 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.323786974 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.323797941 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.324208975 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.324213982 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.324448109 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.324492931 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.324554920 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.324712992 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.324723005 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.397244930 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.397489071 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.397583008 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.397605896 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.397624969 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.397638083 CET	49748	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.397643089 CET	443	49748	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.400768042 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.400808096 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.400876999 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.401098013 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.401109934 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.429399014 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.430166006 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.430197954 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.430654049 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.430660009 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.490323067 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.492871046 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.492883921 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.493364096 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.493370056 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.552489996 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.552560091 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.552669048 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.552884102 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.552906990 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.552918911 CET	49749	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.552925110 CET	443	49749	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.556088924 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.556130886 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.556215048 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.556477070 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.556489944 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.626657963 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.627132893 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.627149105 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.627674103 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.627682924 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.628196955 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.628602028 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.628657103 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.628757000 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.628773928 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.628784895 CET	49750	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.628789902 CET	443	49750	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.631916046 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.631957054 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.632219076 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.632416010 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.632431984 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.692228079 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.705212116 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.705738068 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.705754995 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.706268072 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.706273079 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.743946075 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.743961096 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.744338989 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.744354010 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.744363070 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.744612932 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.744656086 CET	443	49751	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.744693041 CET	49751	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.749356985 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.749387980 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.749444962 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.749625921 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.749639034 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.822500944 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.822572947 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.822643042 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.823299885 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.823314905 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.823324919 CET	49752	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.823329926 CET	443	49752	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.825720072 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.825763941 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.825849056 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.825984001 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.825994968 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.866267920 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.867075920 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.867094040 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.867527008 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.867531061 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.901382923 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.901457071 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.901608944 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.901634932 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.901644945 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.901655912 CET	49753	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.901659966 CET	443	49753	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.904170990 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.904190063 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.904279947 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.904433012 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.904439926 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.945107937 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.945839882 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.945848942 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:27.946039915 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:27.946049929 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.060570002 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.061363935 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.061379910 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.062019110 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.062026978 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.065957069 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.066142082 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.066211939 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.066250086 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.066267967 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.066277981 CET	49754	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.066282988 CET	443	49754	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.068666935 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.068706036 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.069046021 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.069171906 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.069186926 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.126863956 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.127329111 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.127343893 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.127791882 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.127795935 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.143585920 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.143640041 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.143680096 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.143824100 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.143824100 CET	49755	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.143841028 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.143851042 CET	443	49755	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.146570921 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.146616936 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.146704912 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.146933079 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.146945953 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.206310034 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.207004070 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.207019091 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.207472086 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.207477093 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.260523081 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.261096001 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.261174917 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.261241913 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.261257887 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.261290073 CET	49756	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.261296988 CET	443	49756	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.263875961 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.263914108 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.264044046 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.264193058 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.264204979 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.327826023 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.327898979 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.327953100 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.328111887 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.328131914 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.328138113 CET	49757	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.328144073 CET	443	49757	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.330637932 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.330671072 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.330818892 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.330918074 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.330934048 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.369852066 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.370322943 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.370346069 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.370774031 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.370779037 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.408443928 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.408515930 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.408571959 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.408782959 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.408798933 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.408808947 CET	49758	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.408813953 CET	443	49758	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.411775112 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.411820889 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.411906004 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.412096024 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.412106037 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.446230888 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.446751118 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.446768999 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.447278976 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.447283983 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.566253901 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.566840887 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.566864967 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.567277908 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.567282915 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.573308945 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.573385000 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.573435068 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.573570013 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.573582888 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.573594093 CET	49759	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.573597908 CET	443	49759	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.576339960 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.576380014 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.576463938 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.576581955 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.576591015 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.631747961 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.632272959 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.632287025 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.632900953 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.632906914 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.644465923 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.644727945 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.644798040 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.644830942 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.644845963 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.644866943 CET	49760	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.644872904 CET	443	49760	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.647645950 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.647680998 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.647842884 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.647880077 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.647883892 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.767936945 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.768022060 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.768127918 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.768364906 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.768381119 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.768392086 CET	49761	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.768398046 CET	443	49761	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.771148920 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.771172047 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.771261930 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.771433115 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.771444082 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.890835047 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.891381025 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.891417027 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.891849041 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.891854048 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.927251101 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.927315950 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.927359104 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.927831888 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.927831888 CET	49762	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.927848101 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.927853107 CET	443	49762	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.931310892 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.931353092 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.931441069 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.932621956 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.932641983 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.956089020 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.956486940 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.956496000 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:28.957547903 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:28.957555056 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.035687923 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.036356926 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.036376953 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.036793947 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.036798954 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.087316990 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.087960958 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.087985992 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.088433981 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.088438988 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.108021975 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.108896971 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.108975887 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.109013081 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.109013081 CET	49764	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.109030962 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.109040022 CET	443	49764	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.111854076 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.111884117 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.111968040 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.112159967 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.112171888 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.188369989 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.188436985 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.188704014 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.188757896 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.188757896 CET	49765	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.188776970 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.188786030 CET	443	49765	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.191412926 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.191442966 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.191627979 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.191934109 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.191946983 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.238226891 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.238382101 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.238590002 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.241539955 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.241539955 CET	49763	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.241543055 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.241555929 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.241564989 CET	443	49763	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.241570950 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.241679907 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.241848946 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.241863012 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.306943893 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.307416916 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.307504892 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.307720900 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.307720900 CET	49766	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.307739019 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.307750940 CET	443	49766	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.310461998 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.310489893 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.310574055 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.310749054 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.310770035 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.366810083 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.367429972 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.367451906 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.367897987 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.367902040 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.415628910 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.416198969 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.416223049 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.416652918 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.416659117 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.496480942 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.497139931 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.497152090 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.497878075 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.497883081 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.545486927 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.545912981 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.545927048 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.546495914 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.546500921 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.574336052 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.574836969 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.574927092 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.575094938 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.575109959 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.575123072 CET	49767	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.575128078 CET	443	49767	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.577595949 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.577627897 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.577701092 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.577836990 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.577847958 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.615132093 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.615701914 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.615869045 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.615869045 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.615869045 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.619014025 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.619460106 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.619489908 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.619559050 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.620115042 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.620131016 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.620310068 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.620322943 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.620752096 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.620759010 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.749105930 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.749443054 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.749511957 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.749694109 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.749694109 CET	49770	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.749715090 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.749725103 CET	443	49770	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.752273083 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.752310038 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.752408981 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.752580881 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.752594948 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.818989992 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.819381952 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.819555998 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.819555998 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.819555998 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.822382927 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.822429895 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.822508097 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.822644949 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.822660923 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.835050106 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.835253000 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.835304022 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.835494041 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.835494041 CET	49769	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.835510015 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.835517883 CET	443	49769	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.837640047 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.837677002 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.837789059 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.838047981 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.838059902 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.881890059 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.885605097 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.885629892 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.886049032 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.886055946 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.915931940 CET	49768	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.915963888 CET	443	49768	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.997322083 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.997925043 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.997957945 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:29.998392105 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:29.998398066 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.058422089 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.058971882 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.058993101 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.059441090 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.059448004 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.083244085 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.083550930 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.083848000 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.083878040 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.083878040 CET	49772	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.083894968 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.083906889 CET	443	49772	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.086966991 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.087013960 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.087191105 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.087285995 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.087294102 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.119041920 CET	49771	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.119067907 CET	443	49771	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.124429941 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.125042915 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.125071049 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.125545979 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.125551939 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.148817062 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.149274111 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.149311066 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.149743080 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.149749041 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.193228960 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.193604946 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.193672895 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.193736076 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.193756104 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.193768024 CET	49773	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.193773985 CET	443	49773	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.196604013 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.196644068 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.196726084 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.196888924 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.196912050 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.260560989 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.260660887 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.260739088 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.260894060 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.260894060 CET	49774	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.260940075 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.260963917 CET	443	49774	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.263772964 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.263833046 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.263914108 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.264098883 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.264111996 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.328139067 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.329025030 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.329113007 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.329143047 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.329143047 CET	49775	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.329155922 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.329165936 CET	443	49775	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.332247019 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.332288027 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.332401991 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.332576036 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.332587004 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.355266094 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.355420113 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.355468988 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.355578899 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.355597019 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.355607986 CET	49776	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.355612993 CET	443	49776	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.358339071 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.358377934 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.358530998 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.358659983 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.358673096 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.497776985 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.498549938 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.498564959 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.498821974 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.498830080 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.578195095 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.578821898 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.578857899 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.579255104 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.579261065 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.637825012 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.638339043 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.638370037 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.638794899 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.638801098 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.694427967 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.694983959 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.695008039 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.695421934 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.695430994 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.735605001 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.735677958 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.735841036 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.736062050 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.736062050 CET	49778	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.736080885 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.736093998 CET	443	49778	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.738946915 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.738981962 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.739064932 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.739236116 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.739250898 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.803431988 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.803549051 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.803615093 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.803818941 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.803818941 CET	49779	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.803838968 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.803845882 CET	443	49779	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.807895899 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.807930946 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.808048964 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.808195114 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.808204889 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.835639954 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.835731983 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.835776091 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.835912943 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.835922956 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.835933924 CET	49780	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.835938931 CET	443	49780	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.839238882 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.839281082 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.839340925 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.839523077 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.839535952 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.892535925 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.892716885 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.892776966 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.892874002 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.892891884 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.892904997 CET	49777	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.892910957 CET	443	49777	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.895792961 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.895828962 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:30.895931005 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.896122932 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:30.896140099 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.044564009 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.045272112 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.045304060 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.045936108 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.045943975 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.113538027 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.114306927 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.114322901 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.114830017 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.114835978 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.158247948 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.158972025 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.159008980 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.159564972 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.159570932 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.198872089 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.199414015 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.199428082 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.199918032 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.199928999 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243248940 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243278027 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243401051 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.243437052 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243685961 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.243688107 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243700981 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.243715048 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243722916 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.243746042 CET	49782	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.243752003 CET	443	49782	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.246633053 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.246670961 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.246757984 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.246885061 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.246897936 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.358216047 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.358308077 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.358414888 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.358545065 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.358567953 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.358578920 CET	49784	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.358584881 CET	443	49784	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.361639023 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.361681938 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.361747026 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.361876011 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.361893892 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.402194023 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.402216911 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.402295113 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.402312040 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.402384996 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.402436018 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.402558088 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.402574062 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.402585983 CET	49785	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.402592897 CET	443	49785	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.405450106 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.405473948 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.405528069 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.405703068 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.405715942 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.536236048 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.536339998 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.536690950 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.536690950 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.536690950 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.539530039 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.539567947 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.539664984 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.539839029 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.539846897 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.547225952 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.547662973 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.547669888 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.548067093 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.548070908 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.659785032 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.660345078 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.660361052 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.660878897 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.660883904 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.665863037 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.666274071 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.666296005 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.666799068 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.666805029 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.710042000 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.710506916 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.710527897 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.710967064 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.710973024 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.747323036 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.747773886 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.747838020 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.747873068 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.747893095 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.747905016 CET	49786	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.747910976 CET	443	49786	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.750793934 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.750822067 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.750931025 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.751096010 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.751108885 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.837893963 CET	49783	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.837930918 CET	443	49783	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.843792915 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.844505072 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.844530106 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.845098019 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.845103025 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.861625910 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.861649990 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.861793041 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.861819029 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.862085104 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.862097025 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.862106085 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.862147093 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.862207890 CET	443	49787	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.864167929 CET	49787	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.864670992 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.864708900 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.864778042 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.864918947 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.864936113 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.895062923 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.895622015 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.895714998 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.895714998 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.896323919 CET	49781	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.896341085 CET	443	49781	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.898336887 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.898374081 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.898457050 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.898606062 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.898612976 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.910692930 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.910713911 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.910784960 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.910814047 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.910868883 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.911001921 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.911045074 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.911179066 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.911202908 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.911217928 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.911226988 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.911237955 CET	49788	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.911242962 CET	443	49788	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.913544893 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.913578033 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:31.913718939 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.913851023 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:31.913861990 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.041847944 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.041879892 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.041951895 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.041955948 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.041999102 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.042201996 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.042218924 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.042231083 CET	49789	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.042236090 CET	443	49789	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.045113087 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.045166969 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.045391083 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.045555115 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.045569897 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.049839020 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.050229073 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.050239086 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.050627947 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.050632000 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.168971062 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.169732094 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.169770002 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.170300007 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.170305967 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.197005033 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.198103905 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.198122025 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.198534966 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.198539019 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.211513996 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.212135077 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.212153912 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.212861061 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.212867975 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.246934891 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.247051954 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.247262955 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.247343063 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.247343063 CET	49790	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.247359991 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.247370958 CET	443	49790	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.250009060 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.250047922 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.250118971 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.250267029 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.250281096 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.349548101 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.350265026 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.350296974 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.350866079 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.350874901 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.366687059 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.366782904 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.366997004 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.367038965 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.367058992 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.367086887 CET	49791	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.367093086 CET	443	49791	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.370059013 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.370100975 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.370181084 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.370361090 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.370373964 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.396075010 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.396394968 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.396512032 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.396550894 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.396560907 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.396570921 CET	49792	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.396575928 CET	443	49792	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.399029970 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.399065018 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.399143934 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.399291992 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.399303913 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.410389900 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.410531044 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.410747051 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.410778046 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.410794020 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.410805941 CET	49793	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.410813093 CET	443	49793	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.413669109 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.413693905 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.413913965 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.414118052 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.414128065 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.551784039 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.552483082 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.552515030 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.552985907 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.552998066 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.553193092 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.553545952 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.553613901 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.553673029 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.553689003 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.553702116 CET	49794	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.553708076 CET	443	49794	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.556783915 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.556813955 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.558156013 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.558285952 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.558295012 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.714607954 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.715307951 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.715328932 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.715473890 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.716069937 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.716082096 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.716156006 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.716164112 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.716465950 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.716471910 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.751262903 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.801011086 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.801603079 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.801632881 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.802079916 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.802084923 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.806603909 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.806612968 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.807468891 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.807483912 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.807492018 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.807696104 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.807729959 CET	443	49795	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.807857990 CET	49795	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.810956955 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.810987949 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.811093092 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.811247110 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.811261892 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.859117031 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.860805988 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.860847950 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.861305952 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.861313105 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.914720058 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.915169954 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.915241957 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.915280104 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.915293932 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.915309906 CET	49797	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.915316105 CET	443	49797	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.915874004 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.915941954 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.916311026 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.916502953 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.916521072 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.916532993 CET	49798	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.916538000 CET	443	49798	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.918291092 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.918334007 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.918443918 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.918595076 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.918608904 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.918631077 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.918662071 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.918766975 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.918896914 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:32.918912888 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.999871016 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:32.999969959 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.000104904 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.004220009 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.004247904 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.004266977 CET	49796	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.004273891 CET	443	49796	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.007457018 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.007500887 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.007567883 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.007745028 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.007761002 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.076919079 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.077008009 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.077203989 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.077259064 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.077259064 CET	49799	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.077284098 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.077295065 CET	443	49799	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.080018044 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.080049038 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.080121040 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.080275059 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.080284119 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.113115072 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.113856077 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.113945961 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.114274979 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.114289045 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.220634937 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.221165895 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.221204042 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.221846104 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.221857071 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.241013050 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.241501093 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.241518021 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.241965055 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.241969109 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.310319901 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.310877085 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.310915947 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.311295986 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.311301947 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.316464901 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.316502094 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.316565037 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.316597939 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.316673040 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.316797972 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.316847086 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.316879988 CET	49800	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.316900015 CET	443	49800	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.319506884 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.319544077 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.319624901 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.319757938 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.319766045 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.379879951 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.380515099 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.380527973 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.381061077 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.381066084 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.419327974 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.419548035 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.419719934 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.419759989 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.419759989 CET	49801	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.419778109 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.419792891 CET	443	49801	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.423016071 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.423053026 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.423156023 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.423309088 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.423322916 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.441709042 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.441832066 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.441893101 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.441912889 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.442118883 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.442296982 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.442312956 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.442323923 CET	49802	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.442328930 CET	443	49802	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.444809914 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.444854975 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.444931984 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.445072889 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.445095062 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.511460066 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.511910915 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.512090921 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.512090921 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.512092113 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.514631033 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.514691114 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.514765978 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.514899969 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.514914036 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.578721046 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.579034090 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.579233885 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.579233885 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.579233885 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.581974983 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.582030058 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.582097054 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.582313061 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.582326889 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.621164083 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.621611118 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.621618986 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.622054100 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.622057915 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.721577883 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.722141027 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.722165108 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.722603083 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.722611904 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.818964958 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.819430113 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.819485903 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.819586039 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.819598913 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.819616079 CET	49805	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.819622040 CET	443	49805	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.819906950 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.822174072 CET	49803	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.822200060 CET	443	49803	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.822324991 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.822360992 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.823220015 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.823239088 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.825562000 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.825613022 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.825679064 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.825831890 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.825844049 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.884668112 CET	49804	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.884691954 CET	443	49804	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.887423038 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.887867928 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.887890100 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.888356924 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.888366938 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.919539928 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.919585943 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.919641018 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.919708967 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.919744015 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.920005083 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.920020103 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.920036077 CET	49806	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.920042038 CET	443	49806	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.923177004 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.923233986 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:33.923341036 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.923532963 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:33.923543930 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.078632116 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.079180002 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.079195976 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.079637051 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.079641104 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.118760109 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.118824959 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.118896961 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.119230032 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.119251013 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.119263887 CET	49808	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.119271040 CET	443	49808	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.122392893 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.122433901 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.122734070 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.122734070 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.122764111 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.127159119 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.127526045 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.127554893 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.127933979 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.127943039 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.184287071 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.184369087 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.184550047 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.184587002 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.184601068 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.184612989 CET	49809	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.184618950 CET	443	49809	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.187339067 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.187369108 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.187441111 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.187683105 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.187695026 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.224685907 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.225321054 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.225338936 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.225771904 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.225775957 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.282211065 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.282552958 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.282629013 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.282668114 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.282684088 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.282700062 CET	49807	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.282706022 CET	443	49807	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.285618067 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.285664082 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.285729885 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.285873890 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.285892963 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.333167076 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.333410978 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.333466053 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.333482027 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.333535910 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.333580971 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.333597898 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.333611012 CET	49810	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.333616972 CET	443	49810	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.336461067 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.336488962 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.336575031 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.336776972 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.336786985 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.423609972 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.423803091 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.424053907 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.424159050 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.424179077 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.424185991 CET	49811	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.424190998 CET	443	49811	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.425441027 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.427103043 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.427113056 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.428154945 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.428184032 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.428267002 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.428272009 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.428319931 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.428512096 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.428522110 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.497509956 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.498019934 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.498039961 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.498545885 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.498554945 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.597070932 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.597764969 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.597784042 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.598201036 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.598206997 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.628644943 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.628674984 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.628736019 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.628767967 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.628804922 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.629041910 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.629062891 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.629074097 CET	49812	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.629080057 CET	443	49812	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.632149935 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.632189035 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.632301092 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.632467031 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.632479906 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.644138098 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.644563913 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.644581079 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.644939899 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.644944906 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.699284077 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.699480057 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.699538946 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.708619118 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.708647966 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.708657026 CET	49813	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.708662033 CET	443	49813	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.712678909 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.712714911 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.712987900 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.713783979 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.713808060 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.738948107 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.739398003 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.739413023 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.739846945 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.739851952 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.828582048 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.828655005 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.828845024 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.828912973 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.828934908 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.828946114 CET	49814	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.828952074 CET	443	49814	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.831625938 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.831701040 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.831800938 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.831954002 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.831986904 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.847276926 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.847348928 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.847465992 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.847502947 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.847517014 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.847527027 CET	49815	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.847532034 CET	443	49815	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.849404097 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.849431038 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.849514008 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.849678040 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.849694014 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.943016052 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.943466902 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.943480015 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.943535089 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.943552971 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.943603992 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.943764925 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.943782091 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.943794966 CET	49816	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.943800926 CET	443	49816	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.944097042 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.944116116 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.944499016 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.944504023 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.946901083 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.946928024 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:34.947061062 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.947355032 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:34.947365999 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.039866924 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.042512894 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.042524099 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.042988062 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.042993069 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.146276951 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.146907091 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.146970034 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.147437096 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.147452116 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.151263952 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.151432037 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.151509047 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.151699066 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.151720047 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.151732922 CET	49817	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.151738882 CET	443	49817	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.154814005 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.154836893 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.154902935 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.155015945 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.155030012 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.157598019 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.157932043 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.157953978 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.158319950 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.158330917 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.240451097 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.241206884 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.241353989 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.241436005 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.241436005 CET	49818	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.241451025 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.241462946 CET	443	49818	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.244616985 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.244657993 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.244764090 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.244879961 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.244894028 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.257374048 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.258167982 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.258177996 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.258652925 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.258656979 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.348942041 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.349354982 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.349459887 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.349539995 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.349539995 CET	49819	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.349575996 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.349622011 CET	443	49819	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.352283001 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.352319002 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.352415085 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.352605104 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.352624893 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.358154058 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.358578920 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.358638048 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.358639956 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.358695030 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.358741045 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.358757973 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.358799934 CET	49820	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.358814001 CET	443	49820	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.360930920 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.360966921 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.361038923 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.361174107 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.361188889 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.456501007 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.456588030 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.456799030 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.457068920 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.457084894 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.457118034 CET	49821	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.457123041 CET	443	49821	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.459006071 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.460011005 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.460072041 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.460275888 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.460417032 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.460452080 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.460479021 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.460494041 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.460875988 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.460880995 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.554271936 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.555102110 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.555126905 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.555540085 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.555545092 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.656488895 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.657252073 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.657289982 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.657632113 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.657879114 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.657886028 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.661252975 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.661751032 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.661758900 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.662520885 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.662524939 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.712817907 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.712847948 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.750217915 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.750242949 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.750272989 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.750663042 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.750715017 CET	443	49822	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.750787020 CET	49822	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.760169029 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.760809898 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.760899067 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.761230946 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.761245966 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.762170076 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.762202978 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.762264013 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.762356043 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.762583971 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.762598991 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.762765884 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.762835979 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.763219118 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.763233900 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.763243914 CET	49823	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.763250113 CET	443	49823	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.766881943 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.766896009 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.766973019 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.767354012 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.767364025 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.892796040 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.892873049 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.893058062 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.893238068 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.893238068 CET	49825	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.893260002 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.893270969 CET	443	49825	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.896275997 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.896317005 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.896409035 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.896641970 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.896652937 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.954653978 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.963663101 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.963756084 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.963875055 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.963944912 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.963963985 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.963975906 CET	49826	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.963982105 CET	443	49826	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.967103958 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.967138052 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:35.967236996 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.967452049 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:35.967468977 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.009701967 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.009722948 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.009871960 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.009886026 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.009896040 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.010152102 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.010200024 CET	443	49824	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.012207031 CET	49824	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.012521029 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.012554884 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.012615919 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.012787104 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.012800932 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.068506002 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.073774099 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.073786974 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.074210882 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.074218035 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.198924065 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.199542999 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.199580908 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.199958086 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.199966908 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.271765947 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.272519112 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.272589922 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.272675037 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.272675037 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.272675037 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.272706032 CET	49828	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.272718906 CET	443	49828	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.275979042 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.276021004 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.276093960 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.276279926 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.276293039 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.315973997 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.316441059 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.316466093 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.316883087 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.316889048 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.472172022 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.473052979 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.473084927 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.473723888 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.473728895 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.497731924 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.497808933 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.497895956 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.498157024 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.498179913 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.498195887 CET	49829	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.498203039 CET	443	49829	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.501135111 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.501197100 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.501290083 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.501456022 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.501466990 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.515858889 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.515935898 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.515988111 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.516310930 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.516329050 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.516346931 CET	49831	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.516352892 CET	443	49831	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.518909931 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.519000053 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.519104958 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.519252062 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.519284010 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.578924894 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.579504013 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.579525948 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.579984903 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.579993010 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.671700954 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.671906948 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.671981096 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.672102928 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.672102928 CET	49827	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.672125101 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.672137022 CET	443	49827	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.675393105 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.675457001 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.675534010 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.675712109 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.675724983 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.709681988 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.710227013 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.710247993 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.710735083 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.710738897 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.784054041 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.784286022 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.784352064 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.784368992 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.784401894 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.784532070 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.784554958 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.784569025 CET	49832	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.784574986 CET	443	49832	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.787166119 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.787209034 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.787282944 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.787410975 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.787422895 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.805668116 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.806288958 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.806319952 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.806857109 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.806866884 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.825356960 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.825928926 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.825948954 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.826361895 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.826375008 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.920032978 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.937226057 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.937284946 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.937299967 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.937316895 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.937367916 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.937534094 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.937551022 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.937561035 CET	49830	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.937566042 CET	443	49830	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.940895081 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.940946102 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.941009998 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.941354036 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.941370010 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.980019093 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.980489016 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.980521917 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:36.980962992 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:36.980968952 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.008130074 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.008203983 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.008297920 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.008568048 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.008595943 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.008611917 CET	49833	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.008619070 CET	443	49833	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.011691093 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.011723042 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.011790991 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.011931896 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.011943102 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.097959042 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.098757982 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.098781109 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.099322081 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.099328041 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.154370070 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.154421091 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.154498100 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.154552937 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.154808044 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.154808044 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.154833078 CET	49834	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.154855013 CET	443	49834	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.157994986 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.158040047 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.158134937 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.158370972 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.158386946 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.180815935 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.180907965 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.181293011 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.181334019 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.181334019 CET	49835	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.181353092 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.181361914 CET	443	49835	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.184439898 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.184473038 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.184567928 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.184724092 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.184739113 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.248315096 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.249078035 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.249109030 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.249655008 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.249661922 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.314908028 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.315695047 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.315713882 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.316322088 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.316329002 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.382644892 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.382679939 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.382735968 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.382769108 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.382800102 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.383080006 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.383100033 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.383111000 CET	49836	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.383117914 CET	443	49836	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.386104107 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.386142969 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.386230946 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.386377096 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.386387110 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.451806068 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.451879978 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.451991081 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.452263117 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.452282906 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.452294111 CET	49837	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.452300072 CET	443	49837	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.455112934 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.455148935 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.455229998 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.455374956 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.455383062 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.464843035 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.476772070 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.476788044 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.477247953 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.477252960 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.484549046 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.489092112 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.489113092 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.489520073 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.489525080 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.518656015 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.518752098 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.518898010 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.518950939 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.518970966 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.518996954 CET	49838	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.519007921 CET	443	49838	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.522207975 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.522239923 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.522501945 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.522501945 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.522527933 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.667527914 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.668457031 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.668507099 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.668549061 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.668567896 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.668581009 CET	49839	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.668586969 CET	443	49839	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.671303034 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.671329021 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.671468019 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.671704054 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.671722889 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.687411070 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.687647104 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.687707901 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.687756062 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.687799931 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.687814951 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.687827110 CET	49840	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.687832117 CET	443	49840	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.689160109 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.689510107 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.689517975 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.689970016 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.689974070 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.690577030 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.690601110 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.690651894 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.690805912 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.690817118 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.835215092 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.835937977 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.835951090 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.836652040 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.836657047 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.892920017 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.892987967 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.893220901 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.893254042 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.893271923 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.893284082 CET	49841	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.893289089 CET	443	49841	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.896202087 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.896223068 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.896294117 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.896485090 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.896493912 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.981296062 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.982362986 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.982362986 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:37.982374907 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:37.982388020 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.000030041 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.000437021 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.000459909 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.000818014 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.000823975 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.036710978 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.037101984 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.037180901 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.037249088 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.037249088 CET	49843	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.037261963 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.037271023 CET	443	49843	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.040179968 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.040208101 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.040286064 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.040441036 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.040452003 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.201529026 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.201611042 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.201745987 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.201944113 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.201955080 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.201970100 CET	49845	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.201975107 CET	443	49845	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.203360081 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.203722954 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.203728914 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.204155922 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.204159021 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.205254078 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.205297947 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.205362082 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.205480099 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.205491066 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.206943989 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.207248926 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.207254887 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.207622051 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.207626104 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.280478954 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.280571938 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.280652046 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.280838966 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.280849934 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.280884027 CET	49844	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.280889988 CET	443	49844	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.283669949 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.283709049 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.283787966 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.283951998 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.283962011 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.349109888 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.349682093 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.349689007 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.350109100 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.350111961 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.406353951 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.406384945 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.406443119 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.406455994 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.406488895 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.406721115 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.406738997 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.406752110 CET	49842	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.406758070 CET	443	49842	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.409754992 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.409804106 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.409893990 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.410058975 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.410070896 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.414316893 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.414343119 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.414385080 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.414386988 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.414422035 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.414594889 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.414608955 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.414623976 CET	49846	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.414628983 CET	443	49846	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.416872978 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.416886091 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.416946888 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.417084932 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.417093039 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.532167912 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.532841921 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.532867908 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.533308029 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.533318043 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.552009106 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.552200079 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.552262068 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.552299023 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.552316904 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.552330971 CET	49847	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.552337885 CET	443	49847	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.555171013 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.555211067 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.555269003 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.555409908 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.555419922 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.713881969 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.714338064 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.714373112 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.714768887 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.714776039 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.726788044 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.727149963 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.727164030 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.727607012 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.727612972 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.740583897 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.740617990 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.740658045 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.740684032 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.740696907 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.740731955 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.740889072 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.740906000 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.740916014 CET	49849	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.740921974 CET	443	49849	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.748451948 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.748492956 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.748563051 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.748703957 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.748717070 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.904067993 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.904809952 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.904839039 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.905308962 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.905323982 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.912478924 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.912550926 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.912621021 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.913044930 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.913064003 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.913100004 CET	49851	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.913105965 CET	443	49851	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.917962074 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.918004990 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.918143034 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.918603897 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.918613911 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.924298048 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.924462080 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.924516916 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.924623966 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.924633026 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.924663067 CET	49852	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.924666882 CET	443	49852	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.927252054 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.927279949 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:38.927341938 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.927472115 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:38.927480936 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.045449018 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.046112061 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.046132088 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.046576023 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.046585083 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.061955929 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.062386990 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.062405109 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.062732935 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.062737942 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.102268934 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.103355885 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.103468895 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.103687048 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.103708029 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.103734016 CET	49853	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.103739977 CET	443	49853	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.106628895 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.106669903 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.106758118 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.106960058 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.106981993 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.225727081 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.226582050 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.226609945 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.227050066 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.227055073 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.232706070 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.233150005 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.233161926 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.233489990 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.233494043 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.248836994 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.249593019 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.249672890 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.249710083 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.249710083 CET	49850	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.249727964 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.249742985 CET	443	49850	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.252616882 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.252655983 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.252733946 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.252911091 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.252923965 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.262291908 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.262394905 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.262552977 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.262590885 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.262590885 CET	49854	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.262605906 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.262618065 CET	443	49854	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.265166998 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.265201092 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.265273094 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.265409946 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.265431881 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.411205053 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.411828041 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.411843061 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.412277937 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.412286997 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.430067062 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.430310965 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.430444956 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.430495977 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.430514097 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.430562973 CET	49855	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.430568933 CET	443	49855	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.433229923 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.433259964 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.433594942 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.433772087 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.433777094 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.435101032 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.435162067 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.435218096 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.435334921 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.435345888 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.435369968 CET	49856	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.435374975 CET	443	49856	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.437392950 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.437414885 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.437493086 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.437608957 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.437619925 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.577414036 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.578656912 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.578671932 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.579061985 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.579066992 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.583851099 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.586656094 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.586669922 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.587069988 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.587074995 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.612570047 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.612653017 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.612713099 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.612730980 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.612782001 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.612890959 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.612955093 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.612974882 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.613001108 CET	49857	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.613007069 CET	443	49857	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.616278887 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.616301060 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.616553068 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.616553068 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.616573095 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.740461111 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.740925074 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.740938902 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.741399050 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.741404057 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.747690916 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.748167038 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.748182058 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.748598099 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.748604059 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.778202057 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.778286934 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.778347969 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.778623104 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.778623104 CET	49859	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.778640985 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.778649092 CET	443	49859	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.781802893 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.781881094 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.781959057 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.782123089 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.782160044 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.796514034 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.796688080 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.796757936 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.796792984 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.796807051 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.796818018 CET	49858	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.796823025 CET	443	49858	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.799073935 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.799117088 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.799254894 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.799413919 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.799432039 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.928333044 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.929157019 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.929168940 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.929503918 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.929507971 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.939107895 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.939183950 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.939424992 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.939444065 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.939456940 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.939466953 CET	49860	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.939472914 CET	443	49860	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.942337990 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.942399979 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.942471981 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.942625046 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.942640066 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.949722052 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.949784040 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.949954033 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.949959040 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.950032949 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.950092077 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.950092077 CET	49861	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.950109005 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.950119019 CET	443	49861	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.952658892 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.952716112 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:39.952796936 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.952939034 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:39.952954054 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.086074114 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.086688042 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.086754084 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.086986065 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.087002039 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.107004881 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.107497931 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.107520103 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.107870102 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.107877970 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.128540993 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.128572941 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.128622055 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.128669024 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.128669024 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.128885984 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.128885984 CET	49862	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.128901005 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.128909111 CET	443	49862	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.131654024 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.131692886 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.131773949 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.131922960 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.131937027 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.248415947 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.249171972 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.249202967 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.249538898 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.249546051 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.259937048 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.260267973 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.260298014 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.260797977 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.260811090 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.293565989 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.293782949 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.293852091 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.293874979 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.293943882 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.294002056 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.294003010 CET	49863	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.294045925 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.294078112 CET	443	49863	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.296737909 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.296787977 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.296863079 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.297005892 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.297019005 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.305083990 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.305254936 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.305327892 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.305372000 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.305372000 CET	49864	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.305391073 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.305397034 CET	443	49864	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.308274031 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.308303118 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.308481932 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.308481932 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.308510065 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.435956955 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.436712980 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.436748981 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.437031984 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.437037945 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.448007107 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.448034048 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.448081017 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.448091030 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.448123932 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.448328972 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.448354959 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.448376894 CET	49865	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.448381901 CET	443	49865	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.451019049 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.451045036 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.451128006 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.451277018 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.451292038 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.463792086 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.463850021 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.464008093 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.464272976 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.464272976 CET	49866	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.464299917 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.464313030 CET	443	49866	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.466774940 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.466820955 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.466901064 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.467046976 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.467060089 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.598256111 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.598822117 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.598840952 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.599272013 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.599277020 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.610352039 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.614629984 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.614646912 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.615082979 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.615087986 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.635570049 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.635592937 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.635643959 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.635663986 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.635931015 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.635978937 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.636039019 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.636055946 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.636065006 CET	49867	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.636070013 CET	443	49867	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.639066935 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.639153004 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.639252901 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.639379978 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.639405012 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.773869991 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.774382114 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.774395943 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.774420023 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.774781942 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.774806023 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.774949074 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.774959087 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.775329113 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.775336981 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.800148010 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.801877022 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.801939964 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.801947117 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.801985025 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.802037954 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.802052975 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.802057981 CET	49868	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.802062988 CET	443	49868	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.805051088 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.805092096 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.805363894 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.805363894 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.805403948 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.953299999 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.953917980 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.953938007 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.954350948 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.954355955 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.972278118 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.972445965 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.972610950 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.972656012 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.972678900 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.972690105 CET	49871	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.972697020 CET	443	49871	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.975720882 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.975749969 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.975836039 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.976036072 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.976049900 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.980765104 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.981126070 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.981193066 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.981234074 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.981234074 CET	49870	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.981261969 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.981273890 CET	443	49870	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.984124899 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.984153986 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:40.984239101 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.984378099 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:40.984389067 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.047429085 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.047501087 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.047656059 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.047713995 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.047713995 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.047880888 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.047907114 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.048271894 CET	49869	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.048278093 CET	443	49869	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.050708055 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.050740004 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.050822973 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.050986052 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.051000118 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.107609987 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.108330965 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.108347893 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.108761072 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.108767986 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.155344009 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.197232962 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.197254896 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.200174093 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.200186968 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.200354099 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.200722933 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.200828075 CET	443	49872	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.200911999 CET	49872	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.204590082 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.204617023 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.204698086 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.204854012 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.204866886 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.277204037 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.277661085 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.277683020 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.278109074 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.278115034 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.282939911 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.283202887 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.283216953 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.283531904 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.283536911 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.301301956 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.303611994 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.303677082 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.303689003 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.303726912 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.303776026 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.303817987 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.303833961 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.303844929 CET	49873	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.303849936 CET	443	49873	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.307009935 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.307039022 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.307132959 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.307264090 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.307272911 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.358565092 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.359080076 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.359103918 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.359530926 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.359535933 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.490628958 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.490951061 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.491010904 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.491077900 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.491173029 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.491173029 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.493979931 CET	49875	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.493980885 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.493993998 CET	443	49875	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.494008064 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.494127989 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.494474888 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.494486094 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.505369902 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.505527973 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.505588055 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.505812883 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.505812883 CET	49874	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.505825996 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.505832911 CET	443	49874	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.508119106 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.508164883 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.508232117 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.508358955 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.508372068 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.525262117 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.526060104 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.526067019 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.526504040 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.526508093 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.556592941 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.556817055 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.556893110 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.557833910 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.557833910 CET	49876	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.557852983 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.557863951 CET	443	49876	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.560442924 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.560489893 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.560561895 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.560709000 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.560724974 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.606484890 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.606933117 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.606954098 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.607371092 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.607378960 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.726459026 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.726535082 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.726589918 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.726600885 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.726659060 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.726711988 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.726897955 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.726912022 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.726922989 CET	49877	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.726927996 CET	443	49877	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.730664968 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.730710030 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.730792999 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.730931044 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.730947018 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.806083918 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.806559086 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.806613922 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.807195902 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.808003902 CET	49878	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.808021069 CET	443	49878	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.808573961 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.808585882 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.809098005 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.809102058 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.811223030 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.811258078 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.811393023 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.811570883 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.811583042 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.830952883 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.831371069 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.831399918 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.831882000 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.831887960 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.874854088 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.876804113 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.876828909 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:41.877217054 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:41.877221107 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.008547068 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.008630037 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.008709908 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.008966923 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.008976936 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.008990049 CET	49879	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.008995056 CET	443	49879	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.012276888 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.012326002 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.012415886 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.012588024 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.012603045 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.041718960 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.042359114 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.042371988 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.042715073 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.042721033 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.074980021 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.075505972 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.075589895 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.075793982 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.075793982 CET	49881	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.075813055 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.075824022 CET	443	49881	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.078583002 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.078612089 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.078742981 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.078917980 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.078933954 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.116276979 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.117177010 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.117207050 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.117551088 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.117557049 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.175395966 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.175491095 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.175745010 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.175786018 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.175786018 CET	49880	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.175806046 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.175817966 CET	443	49880	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.178628922 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.178669930 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.178740025 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.178908110 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.178919077 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.242573977 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.242650986 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.242935896 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.242935896 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.242995024 CET	49882	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.243014097 CET	443	49882	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.246207952 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.246243000 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.246331930 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.246498108 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.246511936 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.318447113 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.318476915 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.318531036 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.318572044 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.318619013 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.318892956 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.318912029 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.318922997 CET	49883	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.318928003 CET	443	49883	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.322055101 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.322098017 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.322181940 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.322438955 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.322448969 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.390120029 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.390664101 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.390676022 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.391138077 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.391144037 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.481827021 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.482434034 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.482448101 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.482873917 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.482880116 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.544926882 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.545489073 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.545519114 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.545948029 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.545958996 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.551114082 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.551378965 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.551409960 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.551698923 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.551703930 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.606781960 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.607403040 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.607523918 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.607634068 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.607634068 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.611628056 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.611656904 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.611668110 CET	49885	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.611674070 CET	443	49885	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.614831924 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.614881039 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.614964962 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.615103960 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.615119934 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.633716106 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.634417057 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.634443045 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.635001898 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.635008097 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.679397106 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.679533958 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.679800987 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.679800987 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.679801941 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.682624102 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.682676077 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.682746887 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.682893038 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.682908058 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.743138075 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.743346930 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.743413925 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.743470907 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.743489027 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.743499041 CET	49884	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.743505001 CET	443	49884	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.746820927 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.746859074 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.746973991 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.747123003 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.747136116 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.849235058 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.849272013 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.849327087 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.849334955 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.849379063 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.849572897 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.849595070 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.849605083 CET	49887	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.849610090 CET	443	49887	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.852546930 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.852591038 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.852720022 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.852818966 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.852828979 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.914503098 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.914570093 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.914710045 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.914992094 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.914992094 CET	49888	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.915010929 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.915019989 CET	443	49888	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.918664932 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.918706894 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.918796062 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.918925047 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.918932915 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.925412893 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.925858021 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.925874949 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.926296949 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.926302910 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.982522964 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.983239889 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.983269930 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.983597994 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.983604908 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:42.994254112 CET	49886	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:42.994280100 CET	443	49886	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.050185919 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.050704956 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.050719023 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.051466942 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.051471949 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.130016088 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.130048990 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.130110979 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.130126953 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.130286932 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.130464077 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.130464077 CET	49889	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.130490065 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.130500078 CET	443	49889	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.133697033 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.133729935 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.133838892 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.134047985 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.134066105 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.157953024 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.158648014 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.158669949 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.159120083 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.159143925 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.181624889 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.181689978 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.182208061 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.182533026 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.182554960 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.182569027 CET	49890	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.182574034 CET	443	49890	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.185415983 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.185446024 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.185538054 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.185714006 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.185720921 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.221424103 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.222286940 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.222326994 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.222881079 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.222897053 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.283410072 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.283432961 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.283565998 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.283628941 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.283648968 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.283845901 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.283860922 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.283870935 CET	49891	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.283876896 CET	443	49891	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.286475897 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.286509037 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.286581993 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.286736965 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.286742926 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365042925 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365067005 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365139008 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.365164042 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365343094 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365395069 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.365417004 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365432024 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.365441084 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.365447998 CET	49892	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.365452051 CET	443	49892	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.368484020 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.368551016 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.368839979 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.368839979 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.368911028 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.420677900 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.420751095 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.420809984 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.420984030 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.421082020 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.421102047 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.421114922 CET	49893	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.421124935 CET	443	49893	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.424246073 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.424288034 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.424375057 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.424550056 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.424561024 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.436083078 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.436461926 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.436490059 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.437046051 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.437052011 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.490823030 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.491442919 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.491457939 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.491926908 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.491931915 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.585964918 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.586651087 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.586661100 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.587096930 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.587100983 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.633584023 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.633894920 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.633968115 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.638027906 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.638051987 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.638062954 CET	49894	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.638068914 CET	443	49894	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.646819115 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.646864891 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.647084951 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.647216082 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.647222996 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.676189899 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.678636074 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.678653002 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.679084063 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.679090023 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.691581964 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.692111015 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.692157030 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.692174911 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.692207098 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.692265987 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.692286015 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.692297935 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.692325115 CET	49895	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.692329884 CET	443	49895	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.695044041 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.695089102 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.695147991 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.695333004 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.695348024 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.732348919 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.732989073 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.733006001 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.733458996 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.733464956 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.787012100 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.787091970 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.787157059 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.787401915 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.787432909 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.787445068 CET	49896	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.787450075 CET	443	49896	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.790313959 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.790349007 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.790407896 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.790574074 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.790582895 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.932743073 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.932840109 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.933068037 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.933121920 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.933121920 CET	49898	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.933145046 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.933159113 CET	443	49898	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.936224937 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.936259031 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.936383009 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.936552048 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.936566114 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.950874090 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.951385975 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.951400042 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:43.951962948 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:43.951968908 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.031121016 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.031793118 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.031815052 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.032392025 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.032397032 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.094999075 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.095630884 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.095679998 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.096278906 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.096287012 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.147150993 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.147464991 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.147525072 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.147567034 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.147603989 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.147666931 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.147687912 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.147700071 CET	49899	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.147705078 CET	443	49899	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.151031971 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.151063919 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.151231050 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.151484966 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.151494980 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.228957891 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.229043961 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.229146004 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.230612993 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.230626106 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.230629921 CET	49900	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.230633020 CET	443	49900	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.233550072 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.233589888 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.233659029 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.233802080 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.233808041 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.237639904 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.238061905 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.238075018 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.238631964 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.238639116 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.294856071 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.295413971 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.295461893 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.295474052 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.295490980 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.295547009 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.295598030 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.295615911 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.295624971 CET	49901	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.295631886 CET	443	49901	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.298281908 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.298326969 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.298399925 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.298547983 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.298576117 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.300563097 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.301412106 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.301456928 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.301470995 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.301484108 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.301534891 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.301568031 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.301575899 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.301584959 CET	49897	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.301589966 CET	443	49897	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.304028034 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.304064989 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.304114103 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.304284096 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.304300070 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.440937042 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.441082954 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.441168070 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.441329956 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.441342115 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.441349030 CET	49902	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.441354036 CET	443	49902	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.444402933 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.444442034 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.444525957 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.444705009 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.444727898 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.460752964 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.461314917 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.461334944 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.461854935 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.461863995 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.539144039 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.539652109 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.539668083 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.540088892 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.540093899 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.631315947 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.631897926 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.631932020 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.632335901 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.632340908 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.730238914 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.730698109 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.730727911 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.731180906 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.731187105 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.753721952 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.754210949 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.754266977 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.754278898 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.754308939 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.754359007 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.754359007 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.754376888 CET	49904	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.754388094 CET	443	49904	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.757283926 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.757318974 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.757380962 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.757597923 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.757611990 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.758048058 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.758483887 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.758610010 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.758610010 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.758610010 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.761209011 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.761235952 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.761424065 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.761424065 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.761450052 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.833134890 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.833707094 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.833889008 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.833950996 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.833964109 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.833973885 CET	49906	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.833978891 CET	443	49906	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.836728096 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.836774111 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.836858988 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.836992979 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.837007046 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.929410934 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.929475069 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.929527998 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.929802895 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.929824114 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.929835081 CET	49905	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.929841995 CET	443	49905	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.934041977 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.934093952 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:44.934303045 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.936964989 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:44.936985970 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.064965963 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.065644979 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.065675974 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.066226959 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.066231966 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.066525936 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.066786051 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.066798925 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.067101955 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.067109108 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.072341919 CET	49903	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.072374105 CET	443	49903	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.236330986 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.237023115 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.237051010 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.237483978 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.237488985 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.266741991 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.266818047 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.267040014 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.267069101 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.267088890 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.267100096 CET	49908	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.267106056 CET	443	49908	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.269895077 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.269929886 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.270011902 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.270140886 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.270150900 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.370502949 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.370532990 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.370594025 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.370604992 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.370646000 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.370894909 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.370920897 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.370933056 CET	49909	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.370939016 CET	443	49909	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.373965979 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.374002934 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.374093056 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.374272108 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.374281883 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.437393904 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.437483072 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.437550068 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.437756062 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.437772989 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.437791109 CET	49910	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.437796116 CET	443	49910	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.437997103 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.438421011 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.438446999 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.438872099 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.438877106 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.440874100 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.440907001 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.440978050 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.441090107 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.441099882 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.633981943 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.634062052 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.634231091 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.634516954 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.634536982 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.634567022 CET	49911	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.634572983 CET	443	49911	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.637557983 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.637592077 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.637679100 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.637810946 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.637820959 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.678679943 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.679301977 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.679311991 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.679779053 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.679784060 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.685080051 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.685564041 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.685591936 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.685889959 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.685897112 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.754419088 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.755198956 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.755213976 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.755688906 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.755695105 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.877248049 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.877830029 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.877851009 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.878252983 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.878257990 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.879559994 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.879854918 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.879905939 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.879914999 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.879959106 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.880006075 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.880026102 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.880037069 CET	49912	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.880042076 CET	443	49912	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.882580996 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.882885933 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.882889986 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.882927895 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.882957935 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.882996082 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.883131027 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.883137941 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.883157969 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.883157969 CET	49913	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.883172989 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.883188009 CET	443	49913	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.885711908 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.885747910 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:45.885838985 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.885996103 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:45.886008024 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.000072002 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.041078091 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.041101933 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.050568104 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.050595045 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.050606966 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.050950050 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.051000118 CET	443	49914	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.051050901 CET	49914	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.053478956 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.053522110 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.053800106 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.053950071 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.053960085 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.074685097 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.074719906 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.074790955 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.074850082 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.075453043 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.075479031 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.075496912 CET	49907	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.075505018 CET	443	49907	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.079854965 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.079893112 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.080064058 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.080240011 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.080249071 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.187321901 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.187998056 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.188029051 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.188486099 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.188491106 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.191387892 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.191675901 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.191709995 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.192070007 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.192075968 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.194830894 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.195127010 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.195144892 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.195547104 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.195559978 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.385413885 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.391417027 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.391453028 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.391704082 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.391809940 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.391876936 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.391891956 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.391948938 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.395931005 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.396014929 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.396104097 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.397345066 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.397370100 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.397384882 CET	49917	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.397391081 CET	443	49917	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.398530960 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.398546934 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.398559093 CET	49916	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.398565054 CET	443	49916	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.399298906 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.400295019 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.400305033 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.401810884 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.401859045 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.401928902 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.402081013 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.402107000 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.402122974 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.402133942 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.402169943 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.402292013 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.402302027 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.447372913 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.447393894 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.447669029 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.447681904 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.447711945 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.447957993 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.447997093 CET	443	49915	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.448065042 CET	49915	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.451391935 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.451455116 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.451803923 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.451803923 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.451847076 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.584414959 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.584494114 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.584800005 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.585114956 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.585114956 CET	49919	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.585134983 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.585144997 CET	443	49919	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.588046074 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.588109970 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.588345051 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.588505030 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.588516951 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.674982071 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.675664902 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.675688028 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.676268101 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.676275015 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.707815886 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.708089113 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.708585024 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.708617926 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.709047079 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.709053993 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.709146976 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.709163904 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.709465027 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.709470987 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.874875069 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.874960899 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.875219107 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.875312090 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.875327110 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.875333071 CET	49918	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.875339031 CET	443	49918	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.879106045 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.879180908 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.879472971 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.879656076 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.879673004 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.886168003 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.886955976 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.886971951 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.887135983 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.887142897 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.888185024 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.888534069 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.888552904 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.888950109 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.888957024 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911398888 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911504984 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911520004 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911529064 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911571980 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911583900 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911597967 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911621094 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911706924 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911725998 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911731958 CET	49920	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911737919 CET	443	49920	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911780119 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911789894 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.911799908 CET	49921	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.911804914 CET	443	49921	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.914609909 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.914648056 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.914952993 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.915160894 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.915185928 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.915185928 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.915196896 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:46.915246010 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.915409088 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:46.915422916 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.085119009 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.085284948 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.085469007 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.085932016 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.085932016 CET	49922	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.085954905 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.085964918 CET	443	49922	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.089165926 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.089217901 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.090131998 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.090270996 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.090281963 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.102555990 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.102586985 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.102647066 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.102670908 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.102716923 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.102935076 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.102956057 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.102967978 CET	49923	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.102972984 CET	443	49923	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.105521917 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.105545998 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.105623960 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.105743885 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.105753899 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.182667971 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.183129072 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.183151007 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.183614969 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.183619022 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.218933105 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.219657898 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.219685078 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.220091105 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.220098019 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.221788883 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.222330093 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.222343922 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.222697973 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.222702980 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.381267071 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.381494045 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.381557941 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.381587029 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.381587029 CET	49924	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.381603003 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.381609917 CET	443	49924	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.384495020 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.384536028 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.384632111 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.385459900 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.385472059 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.390786886 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.391352892 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.391381025 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.391808033 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.391813993 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.412082911 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.412533998 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.412547112 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.412981033 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.412986040 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.416299105 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.416595936 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.416650057 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.416651011 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.416699886 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.417095900 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.417118073 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.417128086 CET	49926	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.417136908 CET	443	49926	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.421001911 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.421421051 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.421495914 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.425553083 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.425595045 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.425664902 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.425950050 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.425965071 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.426073074 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.426099062 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.426115990 CET	49925	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.426124096 CET	443	49925	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.428838968 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.428865910 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.428955078 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.429080963 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.429100037 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.590193987 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.590272903 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.590356112 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.590590954 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.590609074 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.590620041 CET	49927	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.590626001 CET	443	49927	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.593874931 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.593904972 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.593997955 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.594203949 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.594216108 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.615941048 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.616019011 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.616163969 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.616488934 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.616501093 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.616512060 CET	49928	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.616518021 CET	443	49928	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.619704962 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.619734049 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.619796038 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.619945049 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.619956970 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.730454922 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.730957031 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.730973959 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.731447935 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.731456041 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.732817888 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.733217955 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.733242035 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.733710051 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.733716011 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.901283979 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.901866913 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.901885033 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.902302980 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.902307034 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.927052975 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.927473068 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.927501917 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.928076982 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.928083897 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.962842941 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.962920904 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.963016987 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.966891050 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.966911077 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.966923952 CET	49931	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.966931105 CET	443	49931	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.972888947 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.972933054 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:47.973018885 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.973251104 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:47.973265886 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.021899939 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.022497892 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.022521019 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.022950888 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.022955894 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.040484905 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.040548086 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.040608883 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.040797949 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.040797949 CET	49930	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.040818930 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.040829897 CET	443	49930	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.043937922 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.043967962 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.044205904 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.044205904 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.044235945 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.108099937 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.108176947 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.108233929 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.112855911 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.112886906 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.112899065 CET	49932	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.112905979 CET	443	49932	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.116137981 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.116197109 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.116302967 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.116478920 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.116494894 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.129900932 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.130050898 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.130141973 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.130186081 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.130204916 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.130228043 CET	49933	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.130251884 CET	443	49933	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.132586956 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.132616043 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.132702112 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.132853985 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.132869959 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.222147942 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.222177029 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.222229004 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.222404957 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.222645044 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.222645044 CET	49929	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.222661972 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.222671032 CET	443	49929	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.225831985 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.225887060 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.226062059 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.226351023 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.226365089 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.281778097 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.282404900 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.282422066 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.282804966 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.282810926 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.389220953 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.389863014 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.389875889 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.390315056 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.390320063 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.420392036 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.420931101 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.420964003 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.421374083 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.421380043 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.434154034 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.434510946 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.434528112 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.434880972 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.434885979 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.479881048 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.479957104 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.480045080 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.480278969 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.480278969 CET	49934	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.480295897 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.480304956 CET	443	49934	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.482898951 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.482965946 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.483038902 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.483210087 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.483218908 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.529855013 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.532845020 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.532862902 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.533168077 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.533173084 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.586952925 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.587025881 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.587083101 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.587340117 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.587349892 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.587363005 CET	49935	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.587368011 CET	443	49935	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.590293884 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.590334892 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.590421915 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.590620995 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.590631962 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.619584084 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.620148897 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.620228052 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.620277882 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.620277882 CET	49936	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.620292902 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.620301962 CET	443	49936	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.622853994 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.622895002 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.622968912 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.623111010 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.623127937 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.632555008 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.632736921 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.632781982 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.632793903 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.632843018 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.632884026 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.632898092 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.632906914 CET	49937	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.632911921 CET	443	49937	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.635353088 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.635373116 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.635432959 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.635581017 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.635595083 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.729515076 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.729692936 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.729877949 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.729877949 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.729918003 CET	49938	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.729937077 CET	443	49938	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.732863903 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.732892036 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.732981920 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.733192921 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.733206034 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.787647009 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.788203955 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.788227081 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.788646936 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.788655996 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.924962997 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.925597906 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.925611973 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.926054001 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.926059008 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.936527014 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.937020063 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.937052965 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.937417030 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.937422037 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.985815048 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.985827923 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.985891104 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.985927105 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.985959053 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.986196041 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.986217976 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.986232996 CET	49939	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.986238003 CET	443	49939	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.988750935 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.988781929 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:48.990312099 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.990439892 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:48.990453959 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.042965889 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.043474913 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.043505907 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.043925047 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.043931007 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.127557039 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.127614975 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.127686024 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.127779961 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.127779961 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.128282070 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.128282070 CET	49941	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.128304958 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.128314972 CET	443	49941	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.130553961 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.130593061 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.130708933 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.130954981 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.130965948 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.139347076 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.139426947 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.139650106 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.139755964 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.139775038 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.139786005 CET	49942	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.139791965 CET	443	49942	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.151720047 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.151756048 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.151813030 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.152546883 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.152555943 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.196834087 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.197504997 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.197540045 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.197956085 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.197964907 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.254026890 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.260118961 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.260209084 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.260270119 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.260286093 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.260298967 CET	49943	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.260303974 CET	443	49943	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.263211012 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.263246059 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.263339043 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.263514042 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.263528109 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.290224075 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.290828943 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.290842056 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.291316032 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.291321993 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.396231890 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.396380901 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.396665096 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.396665096 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.396665096 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.399441957 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.399485111 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.399708986 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.399708986 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.399739027 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.435149908 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.435834885 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.435843945 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.436270952 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.436275005 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.451050997 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.451615095 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.451646090 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.451973915 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.451980114 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.562479019 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.563127041 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.563154936 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.563596010 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.563601971 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.636912107 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.637284994 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.637336969 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.637351036 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.637440920 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.637460947 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.637487888 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.637500048 CET	49945	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.637506962 CET	443	49945	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.640327930 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.640362024 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.640449047 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.640652895 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.640669107 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.649544001 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.650031090 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.650096893 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.650130987 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.650141954 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.650151014 CET	49946	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.650156021 CET	443	49946	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.653148890 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.653182030 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.653312922 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.653487921 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.653492928 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.673002958 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.673387051 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.673465014 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.673501015 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.673511982 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.673522949 CET	49944	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.673531055 CET	443	49944	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.676714897 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.676737070 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.676839113 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.677018881 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.677031994 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.697511911 CET	49940	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.697547913 CET	443	49940	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.701509953 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.702636957 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.702658892 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.703078985 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.703085899 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.760516882 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.760588884 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.760668993 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.760862112 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.760883093 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.760896921 CET	49947	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.760901928 CET	443	49947	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.763582945 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.763617992 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.763780117 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.763950109 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.763966084 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.900821924 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.900849104 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.900906086 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.900923014 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.900998116 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.901042938 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.901223898 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.901252985 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.901267052 CET	49948	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.901273012 CET	443	49948	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.904227972 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.904258966 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.904428005 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.904613018 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.904625893 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.956024885 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.956621885 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.956640959 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:49.958106995 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:49.958113909 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.074871063 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.075484037 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.075503111 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.075916052 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.075921059 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.153568983 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.155942917 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.156042099 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.156085968 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.156085968 CET	49950	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.156100988 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.156111002 CET	443	49950	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.159068108 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.159107924 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.159188032 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.159362078 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.159368992 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.205364943 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.206027985 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.206056118 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.206625938 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.206630945 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.271600008 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.271716118 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.271785021 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.272109032 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.272109032 CET	49951	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.272120953 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.272130013 CET	443	49951	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.275222063 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.275269985 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.275382042 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.275618076 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.275631905 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.404448986 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.404654980 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.404730082 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.404866934 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.404881001 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.404891968 CET	49953	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.404898882 CET	443	49953	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.407612085 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.407644033 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.407701969 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.407897949 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.407912016 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.462845087 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.463846922 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.463864088 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.464447975 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.464452982 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.551650047 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.552305937 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.552318096 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.552758932 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.552763939 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.581048012 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.581643105 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.581660986 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.581922054 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.581933022 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.662717104 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.662753105 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.662816048 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.662977934 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.662977934 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.663181067 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.663197994 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.663212061 CET	49954	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.663217068 CET	443	49954	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.666279078 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.666309118 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.666402102 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.666574955 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.666589975 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.748394966 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.748548985 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.748809099 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.748809099 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.748809099 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.780433893 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.780945063 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.781006098 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.781063080 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.781080008 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.781091928 CET	49955	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.781096935 CET	443	49955	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.835829973 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.836348057 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.836369991 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.836777925 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.836783886 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.838172913 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.838838100 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.838850021 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.839756012 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.839761972 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.971246004 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.971748114 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.971764088 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:50.972173929 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:50.972178936 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.034854889 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.034936905 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.034992933 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.035162926 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.035191059 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.035213947 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.035229921 CET	49956	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.035235882 CET	443	49956	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.053998947 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.054330111 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.054451942 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.054451942 CET	49952	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.054470062 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.054481030 CET	443	49952	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.056730032 CET	49949	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.056740046 CET	443	49949	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.197324991 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.197401047 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.197597980 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.197797060 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.197817087 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:57:51.197832108 CET	49957	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:57:51.197835922 CET	443	49957	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.192369938 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.192410946 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.192540884 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.192833900 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.192850113 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.509427071 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.509569883 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.510946989 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.510958910 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.511220932 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.512475014 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.560276031 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.809004068 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.809036016 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.809051037 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.809158087 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.809186935 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.809211969 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.809238911 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.842209101 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.842241049 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.842377901 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:01.842390060 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:01.842447996 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.014558077 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.014584064 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.014635086 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.014720917 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.014720917 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.014750957 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.050776005 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.050792933 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.050911903 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.050939083 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.100820065 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.100855112 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.100898981 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.100913048 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.100919962 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.100945950 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.100961924 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.100992918 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.122184038 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.122208118 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.122298956 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.122307062 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.122349024 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.149642944 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.149663925 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.149805069 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.149812937 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.149857044 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.218944073 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.218974113 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.219099045 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.219130993 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.219180107 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.258420944 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.258445978 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.258630991 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.258660078 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.258708000 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.302548885 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.302573919 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.302668095 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.302695036 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.302741051 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.449094057 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.449122906 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.449182034 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.449245930 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.449245930 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.449275017 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.449350119 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.479392052 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.479424953 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.479566097 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.479592085 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.525661945 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.545758963 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.545789003 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.545918941 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.545937061 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.545984030 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.602250099 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.602279902 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.602376938 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.602377892 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.602408886 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.602462053 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.745448112 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.745477915 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.745533943 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.745588064 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.745608091 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.745623112 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.745650053 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.791106939 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.791129112 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.791275024 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.791306973 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.838116884 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.876914978 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.876965046 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.876986980 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.877017021 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.877031088 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.877161026 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.966521025 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.966553926 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.966628075 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.966658115 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:02.966686010 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:02.966701984 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.138497114 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.138525009 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.138557911 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.138601065 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.138730049 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.138744116 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.138855934 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.257546902 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.257569075 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.257656097 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.257724047 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.257782936 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.356147051 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.356178999 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.356261969 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.356271029 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.356314898 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.456793070 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.456821918 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.456918001 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.456952095 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.456999063 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.572341919 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.572375059 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.572453022 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.572467089 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.572509050 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.666243076 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.666271925 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.666321993 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.666333914 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.666393042 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.764712095 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.764734983 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.764831066 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.764842033 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.764884949 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.853147030 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.853167057 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.853275061 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.853311062 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.853357077 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.950675011 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.950707912 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.950887918 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:03.950906038 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:03.950954914 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.049962997 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.049982071 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.050092936 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.050113916 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.050162077 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.229672909 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.229701042 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.229794025 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.229830980 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.232613087 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.271826029 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.271855116 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.271986961 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.271997929 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.272042036 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.379499912 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.379525900 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.379723072 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.379746914 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.379800081 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.486380100 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.486406088 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.486489058 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.486512899 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.488770962 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.705193043 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.705218077 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.705312967 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.705338955 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.705554008 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.729402065 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.729418039 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.729504108 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:04.729522943 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:04.730457067 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.013185978 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.013212919 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.013338089 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.013360977 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.014461994 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.076675892 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.076700926 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.076786995 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.076808929 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.078485966 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.262960911 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.262990952 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.263094902 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.263123035 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.263168097 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.463293076 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.463325024 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.463404894 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.463433027 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.463455915 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.463495016 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.562684059 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.562721014 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:05.562807083 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.563069105 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.563081026 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:05.719367027 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.719393969 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.719548941 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.719579935 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.719631910 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.803106070 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.803133965 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.803255081 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.803255081 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.803284883 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.803333998 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.939529896 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:05.939627886 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.943756104 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.943769932 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:05.944030046 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:05.944086075 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.944437027 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:05.988279104 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:05.998914957 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.998939991 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.999103069 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:05.999135017 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:05.999442101 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.255805969 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.255821943 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.256038904 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.256123066 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.256161928 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.256196976 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.256205082 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.324433088 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.324521065 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.324599028 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.326458931 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.332473040 CET	49959	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.332498074 CET	443	49959	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.348284960 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.348325014 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.348767996 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.348767996 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.348798990 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.655493021 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.655508995 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.655550003 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.655762911 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.655764103 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.655782938 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.655823946 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.718858957 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.719542027 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.719542027 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.719566107 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.719973087 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:06.719979048 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:06.846712112 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.846756935 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.847018003 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:06.847048044 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:06.847107887 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.111670971 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.111682892 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.111730099 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.111789942 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.111804008 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.111845016 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.276482105 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:07.276527882 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:07.276588917 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:07.276619911 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:07.276696920 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:07.286051035 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:07.286072016 CET	443	49960	162.19.137.157	192.168.2.8
Mar 25, 2025 17:58:07.286130905 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:07.286130905 CET	49960	443	192.168.2.8	162.19.137.157
Mar 25, 2025 17:58:07.409945965 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.409960985 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.410001993 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.410037994 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.410051107 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.410084963 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.410104036 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.828887939 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.828907013 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.828938007 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.828975916 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:07.828989983 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:07.829040051 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.029030085 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.029055119 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.029155970 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.029175997 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.029189110 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.029247046 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.309480906 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.309495926 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.309535980 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.309699059 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.309712887 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.309829950 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.532915115 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.532932043 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.532969952 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.532999992 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.533013105 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.533051968 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.829898119 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.829907894 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.829951048 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.829994917 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.830004930 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:08.830039024 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:08.830056906 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.106089115 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.106101036 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.106137991 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.106307030 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.106318951 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.106491089 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.322643995 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.322654963 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.322696924 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.322763920 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.322777033 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.322803974 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.322829008 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.519751072 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.519773006 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.519845009 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.519862890 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.519910097 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.714296103 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.714313984 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.714423895 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.714452982 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.714500904 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.895919085 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.895939112 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.896044970 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:09.896070957 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:09.896115065 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.097708941 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.097728968 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.097846985 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.097873926 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.097999096 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.230756044 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.230773926 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.230880022 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.230901957 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.231095076 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.447431087 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.447453022 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.447544098 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.447561026 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.450663090 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.645483017 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.645503998 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.645627975 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.645647049 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.645839930 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.899557114 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.899580956 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.899686098 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:10.899707079 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:10.899904013 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.202466965 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:11.202478886 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:11.202517986 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:11.202581882 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.202596903 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:11.202606916 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.202620983 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:11.202634096 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.202651024 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.202987909 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.203006029 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:11.203016043 CET	49958	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:11.203021049 CET	443	49958	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:14.765937090 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:14.765993118 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:14.766051054 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:14.766266108 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:14.766280890 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:14.768807888 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:14.768841028 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:14.768917084 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:14.769123077 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:14.769136906 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.072781086 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.073312044 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.073343039 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.074362993 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.074368000 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.076396942 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.076829910 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.076843023 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.077877998 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.077893019 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268280983 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268307924 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268371105 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.268399000 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268656969 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.268670082 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268742085 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.268841982 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268878937 CET	443	49962	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.268944979 CET	49962	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.273421049 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.273497105 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.273695946 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.274023056 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.274023056 CET	49963	443	192.168.2.8	13.107.246.40
Mar 25, 2025 17:58:15.274055004 CET	443	49963	13.107.246.40	192.168.2.8
Mar 25, 2025 17:58:15.274065018 CET	443	49963	13.107.246.40	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 17:57:21.187506914 CET	61271	53	192.168.2.8	1.1.1.1
Mar 25, 2025 17:57:21.294987917 CET	53	61271	1.1.1.1	192.168.2.8
Mar 25, 2025 17:58:01.041023970 CET	57599	53	192.168.2.8	1.1.1.1
Mar 25, 2025 17:58:01.191231012 CET	53	57599	1.1.1.1	192.168.2.8
Mar 25, 2025 17:58:05.440809011 CET	50783	53	192.168.2.8	1.1.1.1
Mar 25, 2025 17:58:05.561819077 CET	53	50783	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 25, 2025 17:57:21.187506914 CET	192.168.2.8	1.1.1.1	0x11fc	Standard query (0)	otelrules.svc.static.microsoft	A (IP address)	IN (0x0001)	false
Mar 25, 2025 17:58:01.041023970 CET	192.168.2.8	1.1.1.1	0x268c	Standard query (0)	otelrules.svc.static.microsoft	A (IP address)	IN (0x0001)	false
Mar 25, 2025 17:58:05.440809011 CET	192.168.2.8	1.1.1.1	0xd04f	Standard query (0)	t.emobility.energy	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 25, 2025 17:56:58.631661892 CET	1.1.1.1	192.168.2.8	0xd3a7	No error (0)	ecs-office.s-0005.dual-s-msedge.net	s-0005.dual-s-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:56:58.631661892 CET	1.1.1.1	192.168.2.8	0xd3a7	No error (0)	s-0005.dual-s-msedge.net		52.123.129.14	A (IP address)	IN (0x0001)	false
Mar 25, 2025 17:56:58.631661892 CET	1.1.1.1	192.168.2.8	0xd3a7	No error (0)	s-0005.dual-s-msedge.net		52.123.128.14	A (IP address)	IN (0x0001)	false
Mar 25, 2025 17:57:21.294987917 CET	1.1.1.1	192.168.2.8	0x11fc	No error (0)	otelrules.svc.static.microsoft	otelrules-bzhndjfje8dvh5fd.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:57:21.294987917 CET	1.1.1.1	192.168.2.8	0x11fc	No error (0)	otelrules-bzhndjfje8dvh5fd.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:57:21.294987917 CET	1.1.1.1	192.168.2.8	0x11fc	No error (0)	star-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:57:21.294987917 CET	1.1.1.1	192.168.2.8	0x11fc	No error (0)	shed.dual-low.s-part-0012.t-0009.t-msedge.net	s-part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:57:21.294987917 CET	1.1.1.1	192.168.2.8	0x11fc	No error (0)	s-part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 25, 2025 17:58:01.191231012 CET	1.1.1.1	192.168.2.8	0x268c	No error (0)	otelrules.svc.static.microsoft	otelrules-bzhndjfje8dvh5fd.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:58:01.191231012 CET	1.1.1.1	192.168.2.8	0x268c	No error (0)	otelrules-bzhndjfje8dvh5fd.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:58:01.191231012 CET	1.1.1.1	192.168.2.8	0x268c	No error (0)	star-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:58:01.191231012 CET	1.1.1.1	192.168.2.8	0x268c	No error (0)	shed.dual-low.s-part-0012.t-0009.t-msedge.net	s-part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:58:01.191231012 CET	1.1.1.1	192.168.2.8	0x268c	No error (0)	s-part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 25, 2025 17:58:05.561819077 CET	1.1.1.1	192.168.2.8	0xd04f	No error (0)	t.emobility.energy	host1.emobility.energy		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 17:58:05.561819077 CET	1.1.1.1	192.168.2.8	0xd04f	No error (0)	host1.emobility.energy		162.19.137.157	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.svc.static.microsoft

t.emobility.energy

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.8	49708	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:21 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:21 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:21 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 24 Mar 2025 13:40:53 GMT ETag: "0x8DD6AD97F959539" x-ms-request-id: a4649760-401e-0035-3130-9d82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165721Z-17cccd5449b89qrjhC1EWR22980000000e5000000000gdyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:21 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-03-25 16:57:21 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2025-03-25 16:57:22 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.8	49713	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:22 UTC	199	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 2ab3e7c2-801e-00a3-6f50-9c7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165722Z-17cccd5449bzd7mthC1EWRrdxw0000000e7000000000ae86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.8	49712	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:22 UTC	199	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 0d61e029-b01e-0097-6901-9c4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165722Z-17cccd5449bmwjbphC1EWRnfmw000000098g0000000026x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.8	49710	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:22 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:22 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 21e0a90e-c01e-008e-1b5d-9c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165722Z-17cccd5449bkk7bshC1EWR4rww0000000ea0000000002b04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.8	49711	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:22 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:22 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: ad95c4cf-201e-0085-1d02-9d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165722Z-17cccd5449bq6f54hC1EWRb85w0000000e8g000000005v7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:22 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.8	49709	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:22 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:22 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: 719aabfc-b01e-0098-0a06-9ccead000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165722Z-17cccd5449bxd7kxhC1EWRapns0000000e3g00000000ku9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:22 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.8	49714	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: ec18b820-a01e-003d-3e06-9c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bg7c4bhC1EWR84740000000e90000000004hu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.8	49715	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 2713ba85-e01e-0071-7c06-9c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449b6sxz8hC1EWRrtxw0000000ea0000000002f47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.8	49716	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 8d1c0b8b-801e-0078-135c-9cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bg7c4bhC1EWR84740000000e3000000000n257 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.8	49717	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 9449f7b1-d01e-00a1-8006-9c35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bww9zshC1EWR9uns0000000e9g000000003has x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.8	49718	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 7b90350d-101e-0028-587f-9c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bn9hh6hC1EWRzvfg0000000e5000000000hdcg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.8	49719	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: afc87390-901e-002a-7206-9c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bgvc9thC1EWR7dt00000000e90000000005t4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.8	49720	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f95baf9f-d01e-002b-5e06-9c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bqvwqkhC1EWR1rfs0000000e80000000007r2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.8	49721	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: aeba459a-401e-0067-095c-9c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bzd7mthC1EWRrdxw0000000e6g00000000bfu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.8	49722	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:23 UTC	199	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4e0f7404-401e-0035-7f06-9c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165723Z-17cccd5449bcdqb4hC1EWRt7pn00000003xg00000000chps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.8	49725	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:24 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 40b0d066-e01e-0085-297f-9cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bvftlphC1EWRsrrs0000000e6g00000000c1y6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.8	49724	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 459b9e05-201e-0096-5406-9cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bq6f54hC1EWRb85w0000000e3g00000000mphv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.8	49726	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 5a788536-801e-0083-1230-9df0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bcdqb4hC1EWRt7pn00000003y000000000ar58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.8	49727	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c95f00d8-801e-0048-0506-9cf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bpx5xthC1EWRqmf40000000e7000000000b416 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.8	49728	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: bb7bf3cd-001e-0034-425c-9cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bzd7mthC1EWRrdxw0000000ea0000000002969 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.8	49729	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9bd5a2f7-501e-0064-3506-9c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bhkn97hC1EWRp7ew0000000e4000000000mb2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.8	49731	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:24 UTC	199	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 999f3f4e-e01e-0003-047f-9c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165724Z-17cccd5449bqnwr7hC1EWRa6600000000e4000000000ka2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:25 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.8	49730	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: c19c1fb2-201e-0051-6306-9c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165725Z-17cccd5449bqvwqkhC1EWR1rfs0000000e5g00000000dm8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.8	49732	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 77dfbf64-101e-008d-4e81-9c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165725Z-17cccd5449bq6f54hC1EWRb85w0000000e5g00000000dzpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:25 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.8	49733	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 18a312b7-201e-0033-6906-9cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165725Z-17cccd5449bkk7bshC1EWR4rww0000000e7000000000a9f5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.8	49723	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b5904a8e-201e-0033-187f-9cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165725Z-17cccd5449bmwjbphC1EWRnfmw000000095000000000bx2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.8	49735	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: b9f501ab-101e-0065-4330-9d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165725Z-17cccd5449blr9xfhC1EWR6mgs0000000e80000000007dfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.8	49736	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:25 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 869b5427-001e-0034-3430-9ddd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165725Z-17cccd5449bcdqb4hC1EWRt7pn00000003y000000000ar9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.8	49738	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fa23314a-b01e-0097-7c5c-9c4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449blr9xfhC1EWR6mgs0000000e3000000000nq8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.8	49734	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:25 UTC	199	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9035fa76-a01e-0032-5787-9c1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bcdqb4hC1EWRt7pn00000003wg00000000ft28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49737	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a0f55496-e01e-000c-2b06-9c8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bzd7mthC1EWRrdxw0000000e7g000000009aev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49739	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ab5a8093-f01e-0052-2406-9c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bmwjbphC1EWRnfmw000000092g00000000khx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.8	49740	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 723ddb03-001e-0034-1d06-9cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bzw64jhC1EWRz2340000000e7g000000008ycy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.8	49742	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4fed7b9b-601e-0032-0c06-9ceebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bh49mhhC1EWRu7400000000e80000000007d81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49741	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d70a70cb-601e-006f-6406-9ce43f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bzd7mthC1EWRrdxw0000000e7g000000009agd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49744	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f95bb353-d01e-002b-5806-9c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bhkn97hC1EWRp7ew0000000e3g00000000nrdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49743	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:26 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a3a9c39b-001e-0079-2e7d-9c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165726Z-17cccd5449bh49mhhC1EWRu7400000000e8g0000000069ar x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.8	49745	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bc82a218-e01e-0052-110e-9cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449blr9xfhC1EWR6mgs0000000e8g0000000069wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.8	49746	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:26 UTC	199	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: ee258060-801e-0067-6e30-9dfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bzw64jhC1EWRz2340000000eag0000000017em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.8	49747	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 18a314cc-201e-0033-6706-9cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bn9hh6hC1EWRzvfg0000000e6g00000000d2sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	49748	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 8b05bc09-301e-003f-387f-9c266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449blr9xfhC1EWR6mgs0000000e90000000004yyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.8	49749	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 18bba126-501e-007b-4106-9c5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bg7c4bhC1EWR84740000000e90000000004k34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.8	49750	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: eaaf8648-401e-0029-1d06-9c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bvftlphC1EWRsrrs0000000e4000000000kmyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.8	49751	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 198da2be-001e-00a2-2e06-9cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bh49mhhC1EWRu7400000000e90000000004yc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.8	49752	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: ab5a8274-f01e-0052-7306-9c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bh49mhhC1EWRu7400000000e6000000000d8a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.8	49753	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: f0b175b2-901e-0016-1b86-9cefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449bzd7mthC1EWRrdxw0000000e6g00000000bg3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.8	49754	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e4b84f1c-901e-0015-7e30-9db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165727Z-17cccd5449b6vb9jhC1EWRfnfg0000000e90000000004qb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	49755	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:27 UTC	199	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 68136152-601e-003d-0c38-9d6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449bpx5xthC1EWRqmf40000000e8g0000000072sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	49756	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 459ba532-201e-0096-3406-9cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449bn9hh6hC1EWRzvfg0000000e3g00000000q0ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	49757	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6379ae4c-601e-0070-605c-9ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449b89qrjhC1EWR22980000000e4g00000000hnb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	49758	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 827b7ff6-601e-0002-3306-9ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449blprb2hC1EWRvwmn0000000e90000000004z2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.8	49759	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 6abdb6f4-001e-008d-4706-9cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449bww9zshC1EWR9uns0000000e3g00000000mqm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.8	49760	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a1741ffe-a01e-006f-6c86-9c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449blr9xfhC1EWR6mgs0000000e7g00000000851h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.8	49761	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1e6c897b-601e-000d-7706-9c2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449bgvc9thC1EWR7dt00000000e7g00000000a68x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.8	49762	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:28 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f437939c-c01e-0014-3006-9ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165728Z-17cccd5449bzw64jhC1EWRz2340000000e5000000000f5w8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:28 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.8	49764	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4cc8036a-c01e-008e-3a06-9c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bgvc9thC1EWR7dt00000000e5g00000000g97w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49765	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:28 UTC	199	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 02e2a4ef-a01e-0021-6030-9d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bgvc9thC1EWR7dt00000000e9g0000000046wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49763	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 42feafe2-a01e-0098-0706-9c8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bmwjbphC1EWRnfmw0000000990000000000ymg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49766	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 87d54334-c01e-0014-1938-9da6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bzd7mthC1EWRrdxw0000000e5000000000g87h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49767	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 6abdb7f6-001e-008d-3a06-9cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bxd7kxhC1EWRapns0000000e6g00000000a5ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49768	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: b6f0009a-b01e-0070-120e-9c1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bmhlnhhC1EWRtpfc0000000e5g00000000evtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.8	49769	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 83404038-601e-0002-165c-9ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449b89qrjhC1EWR22980000000e5g00000000eczn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.8	49770	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 79cee87c-b01e-0021-7b5c-9ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bg7c4bhC1EWR84740000000ea00000000028zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.8	49771	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6dd17e49-801e-0048-2d5c-9cf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bmwjbphC1EWRnfmw000000097g00000000501n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.8	49772	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4ada8899-e01e-0033-3906-9c4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449b6vb9jhC1EWRfnfg0000000e9g000000003r8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49773	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:29 UTC	199	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:29 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 139cc6c8-201e-0000-7006-9ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165729Z-17cccd5449bzd7mthC1EWRrdxw0000000e4000000000ky62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.8	49774	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: bbe3322f-101e-005a-2e3d-9d882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449bh49mhhC1EWRu7400000000e90000000004ym4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.8	49775	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4ba1171b-001e-000b-5606-9c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449b4tm5chC1EWRr5980000000e70000000009h0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.8	49776	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 6d82c0c8-c01e-0066-1e06-9ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449b6vb9jhC1EWRfnfg0000000e7g000000008mhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.8	49778	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 02d7bc96-401e-005b-130e-9c9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449bqnwr7hC1EWRa6600000000e5000000000fvue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.8	49779	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d759ccc8-201e-0071-615c-9cff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449bzw64jhC1EWRz2340000000e80000000007qu9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.8	49780	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 282e6cad-c01e-007a-2d06-9cb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449bzw64jhC1EWRz2340000000e3g00000000mgmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.8	49777	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:30 UTC	199	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 1d4bcce6-701e-0053-0b06-9c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165730Z-17cccd5449bxd7kxhC1EWRapns0000000e90000000004hyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.8	49782	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	199	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a9f967b2-a01e-0053-5384-9c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bmwjbphC1EWRnfmw000000091g00000000qn89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.8	49783	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	199	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 7aeef354-301e-005d-277f-9ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bn9hh6hC1EWRzvfg0000000e5000000000he0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.8	49784	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	199	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: aaeb6caa-e01e-003c-3bf8-9ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bgvc9thC1EWR7dt00000000e800000000088gd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.8	49785	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	200	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4e0f7ee0-401e-0035-2106-9c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bn9hh6hC1EWRzvfg0000000e5000000000he1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.8	49786	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	199	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: fa79ae76-101e-0028-5c06-9c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bzd7mthC1EWRrdxw0000000e80000000007q09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.8	49781	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	199	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 77166926-701e-003e-2906-9c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bh49mhhC1EWRu7400000000e7g0000000095mb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.8	49787	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	200	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c2e30cda-d01e-00ad-1206-9ce942000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bqnwr7hC1EWRa6600000000e6000000000csbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.8	49788	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	199	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 118df12f-d01e-005a-675c-9c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449blr9xfhC1EWR6mgs0000000e6000000000d0d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.8	49789	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:31 UTC	200	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 3b9203e4-901e-00a0-6e06-9c6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165731Z-17cccd5449bkk7bshC1EWR4rww0000000e5g00000000es99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.8	49790	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 83f32f18-001e-000b-1ffd-9b15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bqnwr7hC1EWRa6600000000e3000000000qa0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.8	49791	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c185bb02-201e-0051-20fd-9b7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bfs6jfhC1EWR67880000000e9000000000547r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.8	49792	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 69c6f211-f01e-005d-4e06-9c13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bmhlnhhC1EWRtpfc0000000e9g000000003r0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.8	49793	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 847921b6-301e-003f-76fd-9b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bn9hh6hC1EWRzvfg0000000e6g00000000d392 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.8	49794	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: fd84a32b-d01e-0065-0b64-9cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449b4tm5chC1EWRr5980000000e4000000000ht1m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.8	49795	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: ebd6cc9d-a01e-0002-6538-9d5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bpx5xthC1EWRqmf40000000e3000000000pqxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.8	49797	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 35b29103-801e-0015-7206-9cf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bvj9xqhC1EWRh59s0000000e4000000000ka5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.8	49798	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cd112307-a01e-0053-5d06-9c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bzd7mthC1EWRrdxw0000000e7000000000af25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.8	49796	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 4cc8074a-c01e-008e-3c06-9c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449blprb2hC1EWRvwmn0000000e90000000004zg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.8	49799	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:32 UTC	199	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:32 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: ed10aae7-f01e-0020-0306-9c956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165732Z-17cccd5449bmwjbphC1EWRnfmw000000092000000000n5uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.8	49800	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9e666659-a01e-00ab-0c06-9c9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449bxd7kxhC1EWRapns0000000e5000000000ek30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.8	49801	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 756eba14-001e-0079-2038-9d12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449b89qrjhC1EWR22980000000ea0000000002nqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.8	49802	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 9ef79af5-b01e-0002-7d06-9c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449blprb2hC1EWRvwmn0000000e9g000000003tn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.8	49803	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e5f7a3ba-201e-006e-7506-9cbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449bhkn97hC1EWRp7ew0000000e3g00000000ns1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.8	49804	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: cc9ad0b6-401e-00a3-2206-9c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449bgvc9thC1EWR7dt00000000eag000000001upy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.8	49805	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: aa43ac1d-401e-0048-3186-9c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449bq6f54hC1EWRb85w0000000e900000000057bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.8	49806	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 9896c536-e01e-0020-4e64-9dde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449bmwjbphC1EWRnfmw000000095g000000009w0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.8	49808	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 60eee286-f01e-0000-7f06-9c193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165733Z-17cccd5449bqvwqkhC1EWR1rfs0000000e8g000000006a2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.8	49809	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:33 UTC	199	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 087ba2e2-101e-0079-1a81-9c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bxd7kxhC1EWRapns0000000e90000000004k9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.8	49807	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 9ef79bc1-b01e-0002-3906-9c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bn9hh6hC1EWRzvfg0000000e4000000000mz0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.8	49810	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 14ab1fc4-501e-0016-7206-9c181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449b4wvd9hC1EWRkczn0000000e4000000000k4nh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.8	49811	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3d4c6124-f01e-001f-3206-9c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449b4wvd9hC1EWRkczn0000000e4000000000k4p8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.8	49812	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3bc762d0-901e-0029-0c86-9c274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bh49mhhC1EWRu7400000000eb00000000000q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.8	49813	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: fa79b467-101e-0028-4006-9c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bgvc9thC1EWR7dt00000000e6g00000000dk6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.8	49814	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 776c660f-b01e-0084-4e06-9cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bn9hh6hC1EWRzvfg0000000e9g0000000042qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.8	49815	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 35b293c2-801e-0015-4a06-9cf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bqnwr7hC1EWRa6600000000ea0000000002abw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.8	49816	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 944a0120-d01e-00a1-7406-9c35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165734Z-17cccd5449bzw64jhC1EWRz2340000000e7g000000008z0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.8	49817	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:34 UTC	199	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: be0e2c1f-401e-008c-0730-9d86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bvj9xqhC1EWRh59s0000000eag00000000186f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.8	49818	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 999f4cb8-e01e-0003-797f-9c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449blprb2hC1EWRvwmn0000000e9g000000003tv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.8	49819	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 079de70f-301e-0033-3c71-9cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bvftlphC1EWRsrrs0000000eb000000000001e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.8	49820	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: b4384df8-401e-0015-530e-9c0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449b4wvd9hC1EWRkczn0000000eb00000000001b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.8	49821	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 723de3a2-001e-0034-1006-9cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bhkn97hC1EWRp7ew0000000e6000000000dat2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.8	49822	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 515770af-d01e-0014-61f4-9ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bxd7kxhC1EWRapns0000000e5000000000ek88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.8	49823	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: aecc602f-d01e-008e-7806-9c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bq6f54hC1EWRb85w0000000e4000000000k7sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.8	49824	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0d509183-001e-0046-205c-9cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bn9hh6hC1EWRzvfg0000000e90000000005s41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.8	49825	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: f23c2e4f-f01e-0000-115c-9c193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bzw64jhC1EWRz2340000000eag00000000186y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.8	49826	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:35 UTC	199	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:35 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b6b4142e-e01e-001f-7e0e-9c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165735Z-17cccd5449bmhlnhhC1EWRtpfc0000000e5g00000000ewdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.8	49828	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:36 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 1d600e90-701e-0053-5c0d-9c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bxd7kxhC1EWRapns0000000e3g00000000kvf5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.8	49829	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:36 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 944a022e-d01e-00a1-6f06-9c35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bkk7bshC1EWR4rww0000000eag0000000015dq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.8	49831	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:36 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 4a9d5316-701e-003e-5c30-9d79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bvftlphC1EWRsrrs0000000e3g00000000nk85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.8	49827	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:36 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: e2b0b1bb-501e-00a0-265c-9c9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bh49mhhC1EWRu7400000000e4000000000ks82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.8	49832	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:36 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1abfcf7e-301e-0000-187f-9ceecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449b4wvd9hC1EWRkczn0000000eb00000000001cz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:36 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.8	49830	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:36 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 498cc79f-001e-0079-2106-9c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bqnwr7hC1EWRa6600000000e6g00000000btuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.8	49833	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: af9474c5-001e-0046-1c06-9cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bn9hh6hC1EWRzvfg0000000e7000000000b4v0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.8	49834	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 31ff0c63-201e-000c-1f06-9c79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165736Z-17cccd5449bn9hh6hC1EWRzvfg0000000e5000000000hegv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.8	49835	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:36 UTC	199	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ba1205d-001e-000b-3606-9c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449bcdqb4hC1EWRt7pn00000003zg0000000080th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.8	49836	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 52f65c32-101e-005a-485e-9c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449b89qrjhC1EWR22980000000e5000000000gf9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.8	49837	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c20a360a-d01e-00ad-5a0f-9de942000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449blprb2hC1EWRvwmn0000000eag000000001e12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.8	49838	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 058e151b-401e-008c-3406-9c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449bqvwqkhC1EWR1rfs0000000e70000000009ve7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.8	49839	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b590580b-201e-0033-2f7f-9cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449bh49mhhC1EWRu7400000000eb00000000000vv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.8	49840	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 9e60ac33-a01e-0002-3606-9c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449blr9xfhC1EWR6mgs0000000e4g00000000guhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.8	49841	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: b3a3cf77-b01e-0021-2b06-9ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449blr9xfhC1EWR6mgs0000000e5000000000fk49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:37 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.8	49843	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:37 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: f437a115-c01e-0014-1206-9ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165737Z-17cccd5449bmhlnhhC1EWRtpfc0000000e5g00000000ewnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.8	49844	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 207a3e15-a01e-0050-0406-9cdb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449b6sxz8hC1EWRrtxw0000000e6g00000000bys0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.8	49845	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:37 UTC	199	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 4ba12183-001e-000b-4906-9c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449bvftlphC1EWRsrrs0000000eb0000000000053 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.8	49842	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: a3adb78a-001e-0079-627f-9c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449bfs6jfhC1EWR67880000000e5g00000000fr17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.8	49846	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: b3cb8322-601e-005c-4906-9cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449bzw64jhC1EWRz2340000000e6g00000000b9av x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.8	49847	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 2197401b-001e-008d-517f-9cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449b89qrjhC1EWR22980000000e6g00000000c1uu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.8	49849	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: b2d1e556-501e-008f-2f5c-9c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449blprb2hC1EWRvwmn0000000e80000000007s6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.8	49851	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: e561e1eb-d01e-0017-2c50-9db035000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449bgvc9thC1EWR7dt00000000eb000000000098w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.8	49852	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:38 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7a1d1c70-b01e-0021-6a7f-9ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165738Z-17cccd5449bgvc9thC1EWR7dt00000000eag000000001vdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:38 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.8	49853	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:38 UTC	199	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: dbe4a97a-f01e-0071-1881-9c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bfs6jfhC1EWR67880000000e6g00000000c052 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.8	49850	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:39 UTC	199	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 058e1681-401e-008c-0c06-9c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bww9zshC1EWR9uns0000000e80000000007669 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.8	49854	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:39 UTC	199	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b3a3d2dd-b01e-0021-7106-9ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bn9hh6hC1EWRzvfg0000000eag000000001hdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.8	49855	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:39 UTC	199	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 96c7f4b8-101e-008d-32ca-9c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bww9zshC1EWR9uns0000000e8000000000766k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.8	49856	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:39 UTC	199	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: f437a2b3-c01e-0014-1806-9ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bxd7kxhC1EWRapns0000000e6g00000000a6rs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.8	49857	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:39 UTC	199	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: 6d82ce42-c01e-0066-7506-9ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bhkn97hC1EWRp7ew0000000e8g000000006g7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.8	49859	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-03-25 16:57:39 UTC	199	OUT	GET /rules/rule703601v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 16:57:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEE017060" x-ms-request-id: a4b76e3a-101e-007a-4987-9c047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T165739Z-17cccd5449bqnwr7hC1EWRa6600000000eag00000000142d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 16:57:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 36 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6b 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 61 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703601" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Maker.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMake

Statistics

CPU Usage

• EXCEL.EXE
• splwow64.exe
• EXCEL.EXE

Click to jump to process

Memory Usage

• EXCEL.EXE
• splwow64.exe
• EXCEL.EXE

Click to jump to process

High Level Behavior Distribution

• File
• Registry

Click to dive into process behavior distribution

Click to jump to process

Target ID:	0
Start time:	12:56:51
Start date:	25/03/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x8b0000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	12:58:13
Start date:	25/03/2025
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff7a57b0000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	12:58:25
Start date:	25/03/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\PURCHASE ORDER 5172025.xla.xlsx"
Imagebase:	0x8b0000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report PURCHASE ORDER 5172025.xla.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\Local\Temp\5A759A18.tmp

C:\Users\user\AppData\Local\Temp\~DF0B01E49FE462D030.TMP

C:\Users\user\Desktop\~$PURCHASE ORDER 5172025.xla.xlsx

Static File Info

General

File Icon

Static OLE Info

General

OLE File "PURCHASE ORDER 5172025.xla.xlsx"

Indicators

Summary

Document Summary

Streams with VBA

VBA File Name: Sheet1.cls, Stream Size: 977

General

VBA Code

VBA File Name: Sheet2.cls, Stream Size: 977

General

VBA Code

VBA File Name: Sheet3.cls, Stream Size: 977

General

VBA Code

VBA File Name: ThisWorkbook.cls, Stream Size: 985

General

VBA Code

Streams

Windows Analysis Report
PURCHASE ORDER 5172025.xla.xlsx