Edit tour

Windows Analysis Report
https://coworkingspacecity.com/

Overview

General Information

Sample URL:	https://coworkingspacecity.com/
Analysis ID:	1527488
Tags:	urlscan
Infos:

Errors URL not reachable

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2024,i,14616006925215691485,9205885914510409272,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://coworkingspacecity.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49887 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.9:49781 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/webfonts/icomoon/fonts/icomoon.woff?v=2.7.0.2 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://coworkingspacecity.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2&fver=20241001075830 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/style.css?ver=6.6.2&fver=20241001072351 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/keyframes.css?ver=6.6.2&fver=20241001072351 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/webfonts/fontawesome/css/font-awesome.min.css?ver=6.6.2&fver=20241001072351 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-migrate/3.3.2/jquery-migrate.min.js?ver=3.0.1 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/webfonts/icomoon/style.css?v=2.7.0.2&ver=6.6.2&fver=20241001072351 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/skins/silk/style.css?ver=6.6.2&fver=20241001072351 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-child-master/style.css?ver=6.6.2&fver=20241001072819 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-migrate/3.3.2/jquery-migrate.min.js?ver=3.0.1 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-child-master/keyframes.css?ver=6.6.2&fver=20241001072819 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/cocoon-master/webfonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://coworkingspacecity.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/umedaLightroom_MG_3733_TP_V.jpg-320x180.webp HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/image-4-320x180.jpg HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/image-5-320x180.png HTTP/1.1Host: coworkingspacecity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://coworkingspacecity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/umedaLightroom_MG_3733_TP_V.jpg-320x180.webp HTTP/1.1Host: coworkingspacecity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/image-4-320x180.jpg HTTP/1.1Host: coworkingspacecity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/10/image-5-320x180.png HTTP/1.1Host: coworkingspacecity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: coworkingspacecity.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dalb.valuecommerce.com
Source: global traffic	DNS traffic detected: DNS query: dalc.valuecommerce.com
Source: global traffic	DNS traffic detected: DNS query: aml.valuecommerce.com
Source: global traffic	DNS traffic detected: DNS query: i.moshimo.com
Source: global traffic	DNS traffic detected: DNS query: m.media-amazon.com
Source: global traffic	DNS traffic detected: DNS query: completion.amazon.com
Source: global traffic	DNS traffic detected: DNS query: images-fe.ssl-images-amazon.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.syndication.twimg.com
Source: global traffic	DNS traffic detected: DNS query: secure.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: cse.google.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net

Source: chromecache_66.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_66.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_76.2.dr	String found in binary or memory: http://habrahabr.ru/users/alexufo/
Source: chromecache_76.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_76.2.dr	String found in binary or memory: https://codepen.io/nxworld/pen/oLdoWb
Source: chromecache_69.2.dr	String found in binary or memory: https://im-cocoon.net/wp-content/uploads/skin-silk.png
Source: chromecache_76.2.dr, chromecache_72.2.dr	String found in binary or memory: https://nelog.jp/
Source: chromecache_76.2.dr, chromecache_72.2.dr	String found in binary or memory: https://wp-cocoon.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://wp-cocoon.com/https://wp-cocoon.com/yhirayhirahttps://wp-cocoon.com/terms-of-use/https://wp-
Source: chromecache_75.2.dr	String found in binary or memory: https://wp-cocoon.com/terms-of-use/
Source: chromecache_76.2.dr	String found in binary or memory: https://www.nxworld.net/tips/pure-css-corner-ribbon.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49887 version: TLS 1.2

Source: classification engine

Classification label: unknown1.win@16/41@38/17

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2024,i,14616006925215691485,9205885914510409272,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://coworkingspacecity.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2024,i,14616006925215691485,9205885914510409272,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
secure.gravatar.com	192.0.73.2	true	false	unknown
global.px.quantserve.com	91.228.74.200	true	false	unknown
ad.doubleclick.net	142.250.185.198	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
daxym8vtpycty.cloudfront.net	13.35.58.10	true	false	unknown
ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com	35.74.37.3	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
completion.amazon.com	44.215.138.240	true	false	unknown
site-113401565138.gslb11.sakura.ne.jp	133.125.20.8	true	false	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	unknown
twimg.twitter.map.fastly.net	151.101.44.159	true	false	unknown
coworkingspacecity.com	118.27.95.26	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
cse.google.com	142.250.185.238	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
c.media-amazon.com	3.161.81.160	true	false	unknown
m.media-amazon.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
aml.valuecommerce.com	unknown	unknown	false	unknown
dalb.valuecommerce.com	unknown	unknown	false	unknown
cms.quantserve.com	unknown	unknown	false	unknown
i.moshimo.com	unknown	unknown	false	unknown
images-fe.ssl-images-amazon.com	unknown	unknown	false	unknown
cdn.syndication.twimg.com	unknown	unknown	false	unknown
dalc.valuecommerce.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/icomoon/style.css?v=2.7.0.2&ver=6.6.2&fver=20241001072351	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery-migrate/3.3.2/jquery-migrate.min.js?ver=3.0.1	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-child-master/keyframes.css?ver=6.6.2&fver=20241001072819	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/fontawesome/css/font-awesome.min.css?ver=6.6.2&fver=20241001072351	false	unknown
https://coworkingspacecity.com/wp-content/uploads/2024/10/image-4-320x180.jpg	false	unknown
https://coworkingspacecity.com/wp-content/uploads/2024/10/image-5-320x180.png	false	unknown
https://coworkingspacecity.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2&fver=20241001075830	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/icomoon/fonts/icomoon.woff?v=2.7.0.2	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-master/style.css?ver=6.6.2&fver=20241001072351	false	unknown
https://coworkingspacecity.com/wp-content/uploads/2024/10/umedaLightroom_MG_3733_TP_V.jpg-320x180.webp	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-child-master/style.css?ver=6.6.2&fver=20241001072819	false	unknown
https://coworkingspacecity.com/	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-master/skins/silk/style.css?ver=6.6.2&fver=20241001072351	false	unknown
https://coworkingspacecity.com/wp-content/themes/cocoon-master/keyframes.css?ver=6.6.2&fver=20241001072351	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://codepen.io/nxworld/pen/oLdoWb	chromecache_76.2.dr	false		unknown
http://habrahabr.ru/users/alexufo/	chromecache_76.2.dr	false		unknown
https://nelog.jp/	chromecache_76.2.dr, chromecache_72.2.dr	false		unknown
https://www.nxworld.net/tips/pure-css-corner-ribbon.html	chromecache_76.2.dr	false		unknown
http://fontawesome.io/license	chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://wp-cocoon.com/	chromecache_76.2.dr, chromecache_72.2.dr	false		unknown
https://wp-cocoon.com/https://wp-cocoon.com/yhirayhirahttps://wp-cocoon.com/terms-of-use/https://wp-	chromecache_75.2.dr	false		unknown
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_76.2.dr	false		unknown
https://wp-cocoon.com/terms-of-use/	chromecache_75.2.dr	false		unknown
https://im-cocoon.net/wp-content/uploads/skin-silk.png	chromecache_69.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.228.74.200	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
151.101.44.159	twimg.twitter.map.fastly.net	United States	54113	FASTLYUS	false
118.27.95.26	coworkingspacecity.com	Japan	58649	GMO-REG-NETGMOInternetIncJP	false
3.161.81.160	c.media-amazon.com	United States	16509	AMAZON-02US	false
35.74.37.3	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
133.125.20.8	site-113401565138.gslb11.sakura.ne.jp	Japan	7684	SAKURA-ASAKURAInternetIncJP	false
44.215.138.240	completion.amazon.com	United States	14618	AMAZON-AESUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
18.239.85.223	unknown	United States	16509	AMAZON-02US	false
192.0.73.2	secure.gravatar.com	United States	2635	AUTOMATTICUS	false
142.250.185.238	cse.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.35.58.10	daxym8vtpycty.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527488
Start date and time:	2024-10-07 00:52:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://coworkingspacecity.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	UNKNOWN
Classification:	unknown1.win@16/41@38/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.78, 74.125.206.84, 34.104.35.123, 142.250.185.232, 142.250.186.46, 142.250.186.42, 104.18.187.31, 104.18.186.31, 142.250.185.138, 142.250.186.99, 142.250.185.163, 172.217.16.193, 172.217.18.2, 184.28.90.27, 142.250.186.138, 20.12.23.50, 192.229.221.95, 20.3.187.198
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, a.media-amazon.com.akamaized.net, ocsp.digicert.com, www.googletagmanager.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ajax.googleapis.com, fonts.gstatic.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, tpc.googlesyndication.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://coworkingspacecity.com/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 21:53:56 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.979410734972816
Encrypted:	false
SSDEEP:	48:8Id6TQaHoidAKZdA1P4ehwiZUklqehLy+3:8lMlOky
MD5:	4C08DB15E4F0521953AE0711D3BD87F5
SHA1:	DB43F2552C2030DFE81C917A1B093699772FA15E
SHA-256:	A8B87D79AC10A1DC4F79BE17CC26E553E8BB2C8D1FB4B1D0CDC6167E5734E9F4
SHA-512:	B5FCB484D962D48362192A445931D16416B81D570ABB0313B805717A608897D651125A6D4B182D227D587DAC05E4A21CE8C705B6E9E664E54D04CF4B2ED99303
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....\|..B.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IFY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VFY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VFY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VFY.............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........&@.P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 21:53:56 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.997334422875529
Encrypted:	false
SSDEEP:	48:8jd6TQaHoidAKZdA1+4eh/iZUkAQkqehUy+2:8oM0F9QBy
MD5:	BC4906FD82C5BEA65CDAD52BBF89FEEF
SHA1:	5ED1900D9322AF46874464391A47091E15EFC56B
SHA-256:	FB282B753FA52C29035DBE1840C12D03BBCB009D2B6C09395E9CD5C70CF12A0C
SHA-512:	BB5AC7ED2580A3D25F31148EB9FB77456B4061D880C046F4E8B95547C5078A6EA97751B5839A2DAA29DADBFE09F1745D4271AC724CEFAAB28AB30C7FB86283FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....#...B.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IFY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VFY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VFY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VFY.............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........&@.P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.002991196554984
Encrypted:	false
SSDEEP:	48:8qd6TQVHoidAKZdA1404eh7sFiZUkmgqeh7sSy+BX:8nM0Inoy
MD5:	B78B83BDA33E55D6266D730961A67C2F
SHA1:	D66CB387C436D8CA7FF3F362C3CC723A0BE774F9
SHA-256:	F58E132CE205F212A67FDE27DDFF79BE18906594C38439DCA84CDCCF824AF6EB
SHA-512:	06F945228FACA1C199E6787484AEBF4162DD6065521DCD5162C08E2D8001CF2C47ABE4525442ED044BB1E8CBE97227540BF77A53D9F2DB1D0A9CB3410CB2122A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IFY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VFY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VFY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........&@.P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 21:53:56 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.992588655554211
Encrypted:	false
SSDEEP:	48:8cd6TQaHoidAKZdA1p4ehDiZUkwqehAy+R:85Mj5Ky
MD5:	911BB33631D50C6C0DA50F174B492326
SHA1:	C4164B99BB5CD092E6AE09FCE1C65F5C8BEEE4F1
SHA-256:	9ADD575C9D414EC8EF2F6208871754EBC5C24B7B7DA8566094AB94D045A28573
SHA-512:	814622C085E22E795A3A498C01BD2661A2D571882E4D8FE945EA689AC26C69E5F8F1E0B469A22033A63F618BF4A0D58BE518B615BFB6816B7365093F014A6E76
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....0...B.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IFY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VFY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VFY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VFY.............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........&@.P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 21:53:56 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980935773408159
Encrypted:	false
SSDEEP:	48:8Sd6TQaHoidAKZdA1X4ehBiZUk1W1qehWy+C:8fM9b92y
MD5:	F2E333FC21AD4A640241DDDFD602E62A
SHA1:	0CF46491A745380E08E31911B23E2CA2D2760417
SHA-256:	48A6BCECD290DCC5981101BCC4F463902105DD11B85EB9CFB459BC644136BC55
SHA-512:	F3A58DC2DC7F0513B670BAFF9EB0C259B37EB7C213884BD2F5E2DC506DD907F3A56ADCFC0C6F02DBA2CC493F46BF0F753E7A1C7E61D8B8B5194997C58EE6F110
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b...B.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IFY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VFY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VFY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VFY.............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........&@.P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 21:53:56 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990492039204633
Encrypted:	false
SSDEEP:	48:8Vd6TQaHoidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTboy+yT+:8SMeTcJTbxWOvTboy7T
MD5:	0A647D35218980D6D71083F57417C352
SHA1:	66496D460FF2E54CCEC5AA7AFEAC61D544D4D6F8
SHA-256:	E248372387B4F46ADFDBEC76ECA650D6F13353BC7343724F5C7DC690A64242C0
SHA-512:	DEE4C0F62812EEC36E5C896E679AD82A00F316F15FD7BC67DA2D10D6A6E7C1B40394B4B47481D28C44C6F5B317F9E6B5264FEA1CDA25A3B7BD2B37BCCF2B6685
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....K..B.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IFY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VFY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VFY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VFY.............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........&@.P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	15132
Entropy (8bit):	7.967296852100728
Encrypted:	false
SSDEEP:	384:IROk95qL4Doh9VaTVxFuzIs5TcfCPW7wCkA:bL9hraD0+mv2
MD5:	12228EA9AC350081D1037C4F0CC67AC3
SHA1:	F9CA3C219CD9B595824FBA21D8DD8ECE728591BC
SHA-256:	BCC21A380C18C7C36EBD7647C6CA867EC1E8A45395D5B7184085077BDAFAE41F
SHA-512:	B6F4682FC8FBDDF0BE480CA97BF56E201F480A72B36BEAA95EEAF39F21051DFAB6572544F0AC9379C2D3E7D34E5995CB85FFDF3369604CB90FAB32FB0ED9E8E5
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/uploads/2024/10/image-4-320x180.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........@.."........................................K........................!..1."AQa..2q.......#Bbr$3R..Cc....4S.....%DEs..........................................................!1AQ.a.."2.3q...............?..%...RK.V$..?.7.p........D.Z...>.-...........L.?:.7.^......:k&.5.;..K..^........P..c.l..n...[.p...hh(....V.{..G.5P..n?&.R....h.+b...U.kSGj..?e?7.=pl........oe.K...$..gC...kRhmC,.(y=.qDYo...R..5.~...0t...@[..hM..?<..d.uKL.t....2..Ker....G.x~U..5.a.....+lAZ.......I>\.5.g}........Kh....M.i3.K...h..T6...G.].)....Rb.u].g.j.<....._H..*4...jc..D......^.B[.....5.\.......q?.^.m..Q.Z.'....Q.S.M..P...%[..I.I...NK..7...5..h..._...?.j...,.<....<JM..+4D.yJ..O.`kY.K6.U.!O..p......k..9.;\|.ST.?5a[k...f....O.-t]D.p....F.3Ge.O. ........+.._.i.........i........(..}p.F..7.H...Hki}..B.{.>.,f.^....\..%O.k$

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	89645
Entropy (8bit):	7.968315324712863
Encrypted:	false
SSDEEP:	1536:CKjfAo/nY3DQ4LpSMHDNiUTd3t0QlO0or5HIX4Mb0jPL8+3DVMaxfFTJh:9f1/2jjN73t0QE0orKX4Mb0jz3RMaxtL
MD5:	AB563E498C0D8D9DF11DE1C34B536D74
SHA1:	1B29ADD3104AA6AE5529F003072C0B6F117799C4
SHA-256:	E3DE8E83349BCAE8C9C11E6332B04F9A48E60EF0DCB36C023C925526072AC0B3
SHA-512:	3F461D38E6D27F4C2C6C2B6C08AC3BB354ACE931883B457E1CAFE0DC7B79ECED665D52DE30099DA1875FC4401D586AA53AC67DBFDA7567FF5E0FE17F7AD8E8E9
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/uploads/2024/10/image-5-320x180.png
Preview:	.PNG........IHDR...@.........j.bF....IDATx.\.I.m.v...j..........{\|\|$ER..........n.c;.....r......a....S..D.RR)Y.H..2.x/.F..T.Xk.9.pc....D....^...._......_.y..O...o.._......8.."..D.............L........."....<..j.$ ........_..5sp.tB..n.fnn..*.j....n.N..............].S.Drw$..Z[J.n...............?.....G.......#.."8"8.."...6..........................;.".7UD.@$t...@...A.........][m.,D..f.L.h.."....IU.......(^............3"...; .P...$i....~......{+..n..........}.a...x8...i.ono..F.r.R..X$.K........p8............{..D...0.$".D.!$b2...o?}x..o....{......"B@bB&$t3..$........x:>=.........L.DL.LD....;..?.'...._}.......;?......_.6.$......m.q.&.H)#....."..m7..s..x<.8!M.iwq..y>..7_..rG\.lw..............{...I.v..).5".....!...x....."J)..8...........")..W.D.(....X..n.r"DsP3t 2F..7.0........f....L....Uu.3. ...AN9.hq......&BrE'.. 4@DD773........;...J5.. Bpp..; ....u..4..fk@n@.".....X..p.2D$Dsr.....$fv.5%@......+....;....eqpw "w0.B.p5C0.!". $.$"Dtk.i.c"Pm.+...........nj

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js?ver=3.6.1
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with no line terminators
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	4.951435785625663
Encrypted:	false
SSDEEP:	3:UybmE5RqXE9WCLbWxL3iHZ0khOCN9NZU2RWoD4kbSy:UemZE9WCGxXkhjJq2Qo89y
MD5:	219285F5AA9DD247494DA621EF7C7510
SHA1:	65577ED1FCAB3CE9585C61311A9CEB65C8D8CB59
SHA-256:	6BDC2BF2DB4744A741FC90761E27B7CB360ECABD9A3EDFD586DEFC9EB95717DF
SHA-512:	9AD49E6C365DAA2C71DBC17B0EB55E0724CA449C08A972277DC3D59F6EBA025D927BD6A813E1FA9B3855B9615B9BE3C3216AB2DCC50C3089DC0AC3709E3C57D7
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-child-master/keyframes.css?ver=6.6.2&fver=20241001072819
Preview:	/........@keyframes..CSS.............AMP...500KB........./

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3982
Entropy (8bit):	4.758417339021098
Encrypted:	false
SSDEEP:	96:0A+OrMYfOndGsZ47sUPxhnuXf47RmYaQuKEKs93VpnUOCeWtQxEwVi:0AIYfS3i7sUPPnuXf47IYaQuKEKs9Fpo
MD5:	4E95085C164C570B391BA0DFF4FBB8B1
SHA1:	D431AFB173258E205ACF9DA5385C38B14A31AD41
SHA-256:	832AFA68BD50DA41AC5FA906F57B44D3236D416E894679934E253C2207534CF9
SHA-512:	CC5955F9CBE841AE48BCD9AE9B90140C156434D3590897264AA81F5CF1AD81DFF32ABF58A1DF8E18B1ADE8CD9C554E6DE7B44B2D84610F2B8F8FEC62BC0B463E
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/icomoon/style.css?v=2.7.0.2&ver=6.6.2&fver=20241001072351
Preview:	[class^="icon-"], [class=" icon-"] {. / use !important to prevent issues with browser extensions that change fonts /. font-family: 'icomoon' !important;. speak: never;. font-style: normal;. font-weight: normal;. font-variant: normal;. text-transform: none;. line-height: 1;.. / Enable Ligatures ================ /. letter-spacing: 0;. -webkit-font-feature-settings: "liga";. -moz-font-feature-settings: "liga=1";. -moz-font-feature-settings: "liga";. -ms-font-feature-settings: "liga" 1;. font-feature-settings: "liga";. -webkit-font-variant-ligatures: discretionary-ligatures;. font-variant-ligatures: discretionary-ligatures;.. / Better Font Rendering =========== */. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...icon-mastodon-logo:before {. content: "\e927";.}..icon-mastodon:before {. content: "\e928";.}..icon-bluesky-logo:before {. content: "\e925";.}..icon-bluesky:before {. content: "\e923";.}..icon-misskey-logo:before {. conte

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11267
Entropy (8bit):	5.262731024296997
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1Rd:JrprxG6fPP3P1fQMOIsDsMM4
MD5:	00C98A0D1144F474BFA702DC7603347F
SHA1:	B0A096D4891CB98EB2DDA88A626C1423E9BBDBF2
SHA-256:	106FCD8D723EDA7D92A26893A439CCEF998E5FC68AD228253607143D801E8CD8
SHA-512:	DDF32C235BED5367BFB55C593914847AE3215E74FD072F34C6599796C3A4BBB84DC19487263C1C381A66CBEBAEF9FC96C0608B90CBDD55B1E47A85DD03306FFB
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-migrate/3.3.2/jquery-migrate.min.js?ver=3.0.1
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30855)
Category:	downloaded
Size (bytes):	31018
Entropy (8bit):	4.7466427920546606
Encrypted:	false
SSDEEP:	384:wzu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wclr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	D2E80533E5C8898069E36D59FB995A8F
SHA1:	0571805B3849DBC729370974505D23487E6359FC
SHA-256:	6F14101998FFF51D94EFE7F1946D812BE542FC3F97B7306DDC116EAECA8FCF7F
SHA-512:	DD4877350B20A294F96A115FC35442BDD2851C70CAFD0CF9DDDEA359122D164F64F89DD7B96E60981F8BC4F1BB4B219E2F32A68B47AD285A2B28FE382E8E12E0
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/fontawesome/css/font-awesome.min.css?ver=6.6.2&fver=20241001072351
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal;font-display:swap}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112427
Entropy (8bit):	4.925295015861728
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq
MD5:	319580D7D8944A1A65F635E0D11E5DA5
SHA1:	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD
SHA-256:	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
SHA-512:	743825EAEA11208277528E506C115EC786AB060095AE4250C65A9B02FE9E5CB2AC5AC386532486A2678B9615490CE75BA096A9FD2041200989AD07A726B5D9D0
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2&fver=20241001075830
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	57760
Entropy (8bit):	5.118645054967354
Encrypted:	false
SSDEEP:	1536:5YqD4r/i2jwX+loxdHjaGpqwgd+oHZmY5ZXl7:5/D4r/iAwpqXtJl7
MD5:	8D54A8CE27481C99A723FF76EB857FE5
SHA1:	B174CE8A4569A0D0353465B5C18E707BAAF0047A
SHA-256:	D4FAEEFE6BC3505AB65FCE6FCB2FDD1FE1338094AB1218655A214CBA2663BDDF
SHA-512:	6FEC3B6229A2C6EA2C2BA1B6132016C86523110A8AB0E34F6C49B758D2C2FB8A3E6B0C9BAFFA388D21BBAD27F98B3B001B23F56B8890A4399FDD5F22F31D04E7
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/skins/silk/style.css?ver=6.6.2&fver=20241001072351
Preview:	@charset "UTF-8";./. Skin Name: SILK...... Description: ............................Cocoon..... Author: ... Screenshot URI: https://im-cocoon.net/wp-content/uploads/skin-silk.png. Version: 2.8.2. Priority: 8000001000./../* ..... */..navi-in > ul .sub-menu,..appeal-button,..carousel .a-wrap,..recommended .navi-entry-cards a,..index-tab-buttons .index-tab-button,..entry-card-wrap.a-wrap,..ect-entry-card .a-wrap img,..ect-big-card-first .a-wrap:not(:first-of-type) img,..eye-catch,..sns-buttons a,..blogcard-wrap,..is-style-text a .blogcard-label,..btn,..btn-wrap > a,..ranking-item-image-tag img,..ranking-item-link-buttons a,..toggle-button,.table tfoot td > a,..rect-entry-card .a-wrap .related-entry-card-thumb img,..rect-mini-card .a-wrap .related-entry-card-thumb img,..rect-vertical-card .a-wrap,..pager-post-navi.post-navi-default a img,..pager-post-navi.post-navi-square a,..go-to-top-button,.f

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	13606
Entropy (8bit):	7.984782834276998
Encrypted:	false
SSDEEP:	384:jO13SB5AehSXx0avoBhox5yHcO+/DJCn+fPfnwHE:613SvAehSB/Qrox5kcHDN/WE
MD5:	939420799DE0D8A1C5FA38DCA8E44B4E
SHA1:	0BC38B3D4FB797E15CB37720A87D0C06E7382801
SHA-256:	FEEEB1C7F055ED7CD96EF926BA59F9B19C0F99F9909D58D2B001E055BE9BF35E
SHA-512:	BE2856A63301D091F153A35A58B9FE761DA730C193BAEE9BDCC53AAEAE1F5958054A2A26B3B3D8001DC4E46A6EF0912B5DCED05D9286826837F17B78013079CB
Malicious:	false
Reputation:	low
Preview:	RIFF.5..WEBPVP8 .5..p....@...>I .E".!...(........_.Y......?....C....S.3.\|.......n..=b.}.i.#...7...?v_.>..n?n=...~.{......._.....>.......9.S...s.G._...>.?.....s...?........?{.'...Fh.[._3?.~.....O.W.........{...\|-....#...f.i.../........q.w...G._...~............R}?...m..............c...eo...5.f..-.<....EfaKx....H..3.....%.VY..~.O6..G.8l<&...^.........t...#.{"f.Z.x P^..Q?,`\..U....i....4.n..'{3..V.c...2/.,.....#.2l..W.....\k..$...b...PU.k.zp.Af..ga.~F4-.9.m..I...Q..q..y..8".g.......Xvu..t=......%9,Q.Y)ux3X.OX=@.....A..P^..7.>...3..^..o...I.+..c....kN.q..De...~.<...g4-f.. .`...y......>.0/.+.<C..T.....hk.[...IrD.(...I._9....oN9..6R.f.u.=..r...7.Q.v....HI4.....?....o.c& .4.U#"-.T2.A8.e....\|....(.\|..~.....<X..Eq..w.E..".u.......\a...q.Q.7_H....d.~V"zx......[.l.....;.~..7..:n.a...r..raX...q......l.P...&.1..J......)..3.5s..s=.rw5.{s....@.(.[.GA....WQ...... ...V..6.+._Ar...O..9...H.."..)...b..~..._..q......9.`.q......%#GZ.*.....V.H...n.....r..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	4.428130593909943
Encrypted:	false
SSDEEP:	6:39WsiKvgV+KOBn6u1RY3bKvgV+KOBn6u19vgRyBn6u1YuvgAEjBn6u1RYA:X7wu1RY3m7wu19Au1YuUgu1RYA
MD5:	DC09EF626E859E97176BCF6586C9576B
SHA1:	003EE0DDAA569FB6C49776DE5E6108297CBDCA99
SHA-256:	FB1C74D589690A0A4ED9ECD0F0DE1A26CE1F12745BE44F6750A33DE42676683F
SHA-512:	F4DC5E59CF591F47A8159F76B3E644BC65BCD3F499DA0B1CCDB3C088CFCC2C5716CF37BF5BBA8A1EC577C33364377DA70FD43BB6C45CBED5B7EF2221E7D4BE2D
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/keyframes.css?ver=6.6.2&fver=20241001072351
Preview:	@keyframes shine {. 0% {. transform: scale(0) rotate(45deg);. opacity: 0;. }. 80% {. transform: scale(0) rotate(45deg);. opacity: 0.5;. }. 81% {. transform: scale(4) rotate(45deg);. opacity: 1;. }. 100% {. transform: scale(50) rotate(45deg);. opacity: 0;. }.}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	845
Entropy (8bit):	5.297333619566888
Encrypted:	false
SSDEEP:	12:Z0n4VusXi+wTlcyGZj8/xv5WIgEHedvEAREO/xvj3EARAv//xvjKEARN/xvjn:eEVXlel10OrB2v1N/t1K//01N/5
MD5:	01877832BB6213A26607C3DDBF149DCB
SHA1:	CD867C54D2F5415F0248820C44A85E223CA8BE46
SHA-256:	CCF84BB53B19B1E5310D031C599B2AC4F0311AC5CDC17BD47DA8E409E72FFA49
SHA-512:	BA26224BF1E86FD1E98C72500007A3DDDAC42EDF3FB9A0ED95725DD83162A4999ABF1F42401E418ECE50F3233354B45C1AD2E319FCD736F4BF08480CCEF53F3C
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-child-master/style.css?ver=6.6.2&fver=20241001072819
Preview:	@charset "UTF-8";../!.Theme Name: Cocoon Child.Description: Cocoon........Theme URI: https://wp-cocoon.com/.Author: .....Author URI: https://nelog.jp/.Template: cocoon-master.Version: 1.1.3./../**********************************. ..............***********************************/./............../../*********************************. ....................***********************************/./1023px../.@media screen and (max-width: 1023px){. /............../.}../834px../.@media screen and (max-width: 834px){. /............../.}../480px../.@media screen and (max-width: 480px){. /..............*/.}.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	dropped
Size (bytes):	11267
Entropy (8bit):	5.262731024296997
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1Rd:JrprxG6fPP3P1fQMOIsDsMM4
MD5:	00C98A0D1144F474BFA702DC7603347F
SHA1:	B0A096D4891CB98EB2DDA88A626C1423E9BBDBF2
SHA-256:	106FCD8D723EDA7D92A26893A439CCEF998E5FC68AD228253607143D801E8CD8
SHA-512:	DDF32C235BED5367BFB55C593914847AE3215E74FD072F34C6599796C3A4BBB84DC19487263C1C381A66CBEBAEF9FC96C0608B90CBDD55B1E47A85DD03306FFB
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13606
Entropy (8bit):	7.984782834276998
Encrypted:	false
SSDEEP:	384:jO13SB5AehSXx0avoBhox5yHcO+/DJCn+fPfnwHE:613SvAehSB/Qrox5kcHDN/WE
MD5:	939420799DE0D8A1C5FA38DCA8E44B4E
SHA1:	0BC38B3D4FB797E15CB37720A87D0C06E7382801
SHA-256:	FEEEB1C7F055ED7CD96EF926BA59F9B19C0F99F9909D58D2B001E055BE9BF35E
SHA-512:	BE2856A63301D091F153A35A58B9FE761DA730C193BAEE9BDCC53AAEAE1F5958054A2A26B3B3D8001DC4E46A6EF0912B5DCED05D9286826837F17B78013079CB
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/uploads/2024/10/umedaLightroom_MG_3733_TP_V.jpg-320x180.webp
Preview:	RIFF.5..WEBPVP8 .5..p....@...>I .E".!...(........_.Y......?....C....S.3.\|.......n..=b.}.i.#...7...?v_.>..n?n=...~.{......._.....>.......9.S...s.G._...>.?.....s...?........?{.'...Fh.[._3?.~.....O.W.........{...\|-....#...f.i.../........q.w...G._...~............R}?...m..............c...eo...5.f..-.<....EfaKx....H..3.....%.VY..~.O6..G.8l<&...^.........t...#.{"f.Z.x P^..Q?,`\..U....i....4.n..'{3..V.c...2/.,.....#.2l..W.....\k..$...b...PU.k.zp.Af..ga.~F4-.9.m..I...Q..q..y..8".g.......Xvu..t=......%9,Q.Y)ux3X.OX=@.....A..P^..7.>...3..^..o...I.+..c....kN.q..De...~.<...g4-f.. .`...y......>.0/.+.<C..T.....hk.[...IrD.(...I._9....oN9..6R.f.u.=..r...7.Q.v....HI4.....?....o.c& .4.U#"-.T2.A8.e....\|....(.\|..~.....<X..Eq..w.E..".u.......\a...q.Q.7_H....d.~V"zx......[.l.....;.~..7..:n.a...r..raX...q......l.P...&.1..J......)..3.5s..s=.rw5.{s....@.(.[.GA....WQ...... ...V..6.+._Ar...O..9...H.."..)...b..~..._..q......9.`.q......%#GZ.*.....V.H...n.....r..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 18552, version 1.10
Category:	downloaded
Size (bytes):	18552
Entropy (8bit):	6.263945773620825
Encrypted:	false
SSDEEP:	384:hPyXEB3E0UG1i9RjOfTJT2R7B7m4DXNZZ+PBVHt9N6pn9Yd+G224N/:BIEBiRCrR2F5m45ZZodN4n9q+L24N
MD5:	560A3AD2ABDEF2B4641E461CAA7F1219
SHA1:	F9A959B20D5A76927644B4BBAAF8240E08F0FDCC
SHA-256:	F28983BA3821CB6BE34F2A3FAF9B03A8BEFA9CA60B7C3768A9C620C01065EF5A
SHA-512:	AB0FF8CA3A3C0C128FDCEEF7EA6C37830D3FB0732DFC76A4973D040147EDE9A5DA5A32923C35AA0755770354FD2D926BCCE34AF81560AB44EB4FA3EF8FBDBF1D
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/icomoon/fonts/icomoon.woff?v=2.7.0.2
Preview:	wOFF......Hx......H(........................GSUB.......8...8....OS/2...T...`...`....cmap............k...gasp................glyf......= ..= ....head..A....6...6'@..hhea..B....$...$...shmtx..B4............loca..C.........2.#.maxp..D.... ... .r..name..D.........J..bpost..HX... ... .............,..latn................liga.............................2.D.....2.................................e.....\....... .........".2.B.R.`.p.....Y.............d...............c...............a...............].............`..............._...............^...............\.................Y...............d.....................].......................`...................&.4.N.#.............#...........[.............[.........................Z...............^.........................c...................Z.............a........................._.................d...e...........................3...................................@.........@...@............... .....................................4. ....... .-.6.8

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1202)
Category:	downloaded
Size (bytes):	257886
Entropy (8bit):	5.1407234249989155
Encrypted:	false
SSDEEP:	6144:6VeghuYCNtrQJi1FGyKg2D2y2vzxG2Nv5RjVUy+pRNB27UtM7W/IQsZHCr8X/S72:6VeHYCNtrQJi1FGyKg2D2y2vzxG2Nv5/
MD5:	27A67B2E919B16AF958F6CA7847769BE
SHA1:	A5C9481A9AAFB26349503D8208C2F5260FBEED0C
SHA-256:	D1815B4E2949ABDA80B397BF1F6CAB8DF091CD04D658F9286013EB6A03F5C669
SHA-512:	3BA6559E3B3C5A53A4F8733C9221FB51844E43038CFABD6A1CB0B283A834A7F618F229CE84245C616DA7A205AC46F0C5B8F76DB55259C849D778E89D272ECD81
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/style.css?ver=6.6.2&fver=20241001072351
Preview:	@charset "UTF-8";./.Theme Name: Cocoon.Description: SEO...........................Theme URI: https://wp-cocoon.com/.Author: .....Author URI: https://nelog.jp/.Text Domain: cocoon.Version: 2.7.7.4.Requires at least: 5.7.0.Requires PHP: 7.4.0.Tags: two-columns, left-sidebar, right-sidebar.License: GNU General Public License.License URI: http://www.gnu.org/licenses/gpl-2.0.html./.:root {. --cocoon-twitter-color: #000000;. --cocoon-mastodon-color: #6364FF;. --cocoon-bluesky-color: #0085ff;. --cocoon-misskey-color: #96d04a;. --cocoon-facebook-color: #3b5998;. --cocoon-hatebu-color: #2c6ebd;. --cocoon-google-plus-color: #dd4b39;. --cocoon-pocket-color: #ef4056;. --cocoon-line-color: #00c300;. --cocoon-linkedin-color: #0077b5;. --cocoon-website-color: #002561;. --cocoon-instagram-color: #405de6;. --cocoon-pinterest-color: #bd081c;. --cocoon-youtube-color: #cd201f;. --cocoon-tiktok-color: #000000;. --cocoon-note-colo

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	15132
Entropy (8bit):	7.967296852100728
Encrypted:	false
SSDEEP:	384:IROk95qL4Doh9VaTVxFuzIs5TcfCPW7wCkA:bL9hraD0+mv2
MD5:	12228EA9AC350081D1037C4F0CC67AC3
SHA1:	F9CA3C219CD9B595824FBA21D8DD8ECE728591BC
SHA-256:	BCC21A380C18C7C36EBD7647C6CA867EC1E8A45395D5B7184085077BDAFAE41F
SHA-512:	B6F4682FC8FBDDF0BE480CA97BF56E201F480A72B36BEAA95EEAF39F21051DFAB6572544F0AC9379C2D3E7D34E5995CB85FFDF3369604CB90FAB32FB0ED9E8E5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........@.."........................................K........................!..1."AQa..2q.......#Bbr$3R..Cc....4S.....%DEs..........................................................!1AQ.a.."2.3q...............?..%...RK.V$..?.7.p........D.Z...>.-...........L.?:.7.^......:k&.5.;..K..^........P..c.l..n...[.p...hh(....V.{..G.5P..n?&.R....h.+b...U.kSGj..?e?7.=pl........oe.K...$..gC...kRhmC,.(y=.qDYo...R..5.~...0t...@[..hM..?<..d.uKL.t....2..Ker....G.x~U..5.a.....+lAZ.......I>\.5.g}........Kh....M.i3.K...h..T6...G.].)....Rb.u].g.j.<....._H..*4...jc..D......^.B[.....5.\.......q?.^.m..Q.Z.'....Q.S.M..P...%[..I.I...NK..7...5..h..._...?.j...,.<....<JM..+4D.yJ..O.`kY.K6.U.!O..p......k..9.;\|.ST.?5a[k...f....O.-t]D.p....F.3Ge.O. ........+.._.i.........i........(..}p.F..7.H...Hki}..B.{.>.,f.^....\..%O.k$

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://coworkingspacecity.com/wp-content/themes/cocoon-master/webfonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	89645
Entropy (8bit):	7.968315324712863
Encrypted:	false
SSDEEP:	1536:CKjfAo/nY3DQ4LpSMHDNiUTd3t0QlO0or5HIX4Mb0jPL8+3DVMaxfFTJh:9f1/2jjN73t0QE0orKX4Mb0jz3RMaxtL
MD5:	AB563E498C0D8D9DF11DE1C34B536D74
SHA1:	1B29ADD3104AA6AE5529F003072C0B6F117799C4
SHA-256:	E3DE8E83349BCAE8C9C11E6332B04F9A48E60EF0DCB36C023C925526072AC0B3
SHA-512:	3F461D38E6D27F4C2C6C2B6C08AC3BB354ACE931883B457E1CAFE0DC7B79ECED665D52DE30099DA1875FC4401D586AA53AC67DBFDA7567FF5E0FE17F7AD8E8E9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@.........j.bF....IDATx.\.I.m.v...j..........{\|\|$ER..........n.c;.....r......a....S..D.RR)Y.H..2.x/.F..T.Xk.9.pc....D....^...._......_.y..O...o.._......8.."..D.............L........."....<..j.$ ........_..5sp.tB..n.fnn..*.j....n.N..............].S.Drw$..Z[J.n...............?.....G.......#.."8"8.."...6..........................;.".7UD.@$t...@...A.........][m.,D..f.L.h.."....IU.......(^............3"...; .P...$i....~......{+..n..........}.a...x8...i.ono..F.r.R..X$.K........p8............{..D...0.$".D.!$b2...o?}x..o....{......"B@bB&$t3..$........x:>=.........L.DL.LD....;..?.'...._}.......;?......_.6.$......m.q.&.H)#....."..m7..s..x<.8!M.iwq..y>..7_..rG\.lw..............{...I.v..).5".....!...x....."J)..8...........")..W.D.(....X..n.r"DsP3t 2F..7.0........f....L....Uu.3. ...AN9.hq......&BrE'.. 4@DD773........;...J5.. Bpp..; ....u..4..fk@n@.".....X..p.2D$Dsr.....$fv.5%@......+....;....eqpw "w0.B.p5C0.!". $.$"Dtk.i.c"Pm.+...........nj

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 00:53:43.818802118 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 7, 2024 00:53:45.088267088 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.088310003 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.088377953 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.088680983 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.088692904 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.131299973 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 7, 2024 00:53:45.381314039 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 7, 2024 00:53:45.759321928 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.759494066 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.794327021 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.794361115 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.795358896 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.806477070 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.851401091 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.908183098 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.908236980 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.908279896 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.908327103 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.908354044 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.908374071 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.908397913 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.993859053 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.993937969 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.993947029 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.994020939 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.994194031 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.994194031 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.996268034 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.996314049 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.996342897 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.996360064 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:45.996376038 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:45.996393919 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.080471992 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.080523014 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.080553055 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.080575943 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.080591917 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.080611944 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.081542969 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.081588030 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.081631899 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.081640005 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.081657887 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.081682920 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.082457066 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.082500935 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.082513094 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.082530022 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.082556963 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.082588911 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.083437920 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.083498955 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.083502054 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.083522081 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.083547115 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.083568096 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.167745113 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.167795897 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.167836905 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.167859077 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.167876005 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.167907953 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.168414116 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.168462038 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.168484926 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.168513060 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.168536901 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.168553114 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.169018984 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.169061899 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.169084072 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.169094086 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.169116974 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.169136047 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.169891119 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.169933081 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.169951916 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.169959068 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.169982910 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.170001984 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.170862913 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.170907974 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.170927048 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.170933962 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.170977116 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.170999050 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.171884060 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.171926975 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.171950102 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.171961069 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.171989918 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172008038 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172025919 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.172135115 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172142029 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.172174931 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172230959 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.172276974 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172869921 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172885895 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.172899961 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.172905922 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.225039959 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 7, 2024 00:53:46.230701923 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.230750084 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.230786085 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.230828047 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.230832100 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.230906010 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.231718063 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.231762886 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.231842041 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.231909037 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.231914997 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.231930017 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.231945992 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.231992006 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232105017 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232117891 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.232331991 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232345104 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.232429981 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232436895 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.232644081 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232660055 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.232848883 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232848883 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.232881069 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.872560978 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.874448061 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.875412941 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.875438929 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.877171040 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.877178907 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.877876997 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.877888918 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.878371954 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.878387928 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.887438059 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.898583889 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.900103092 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.905335903 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.905354023 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.905853987 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.905858994 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.914410114 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.914439917 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.914789915 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.914794922 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.915282011 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.915301085 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.915956020 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.915960073 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.978275061 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.978296995 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.978415966 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.978554010 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.978554010 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.979401112 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.979401112 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.979422092 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.979435921 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.981340885 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.981398106 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.981455088 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.984061956 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.984075069 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.984096050 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.984103918 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.996917009 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.996956110 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.997514963 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.998910904 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.998960972 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:46.999079943 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.999226093 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:46.999238968 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.001552105 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.001566887 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.009635925 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.009654999 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.009757042 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.009773016 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.009839058 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.010226965 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.010277033 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.010365963 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.010468960 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.010468960 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.010487080 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.010495901 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.016839981 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.016906023 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.017196894 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.017585039 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.017585039 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.017596960 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.017606974 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.020459890 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.020487070 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.020575047 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.020590067 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.020658970 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.020747900 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.020793915 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.020967960 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.021135092 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.021135092 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.021151066 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.021161079 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.059175968 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.059217930 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.059299946 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.060534954 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.060570955 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.060650110 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.064333916 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.064380884 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.064547062 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.064548969 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.064563990 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.064630985 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.064644098 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.065056086 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.065068007 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.649775982 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.676029921 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.693788052 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.705913067 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.725043058 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.731276035 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.732026100 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.756293058 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.771900892 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.772459984 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.839083910 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.839107990 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.839620113 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.839628935 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.840182066 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.840188980 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.840743065 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.840747118 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.841367960 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.841387987 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.841965914 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.841972113 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.843648911 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.843671083 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.844229937 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.844233990 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.844537020 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.844542027 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.845072985 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.845077038 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.937410116 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.937480927 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.937527895 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.938047886 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.938067913 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.938081980 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.938086987 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.938540936 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.938617945 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.938659906 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.939743042 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.939752102 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.939764977 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.939769030 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.941740990 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.941904068 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.941946030 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.942893982 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.942914009 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.942926884 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.942931890 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.943944931 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.943994999 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.944061041 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.944340944 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.944399118 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.944452047 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.945341110 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.945346117 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.945369959 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.945373058 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.947757959 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.947776079 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.947788954 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.947796106 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.952037096 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.952073097 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.952230930 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.953229904 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.953238010 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.953282118 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.953469038 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.953478098 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.955087900 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.955107927 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.955159903 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.955280066 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.955291986 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.957216978 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.957243919 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.957385063 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.957484007 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.957518101 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.957876921 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.957890034 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.958760977 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.958796978 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:47.958853006 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.959403992 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:47.959417105 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:48.602050066 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:48.604545116 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:48.611799002 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:48.612426043 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:48.619394064 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:48.646934986 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:48.647161961 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:48.662543058 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:48.662548065 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:48.662781000 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.386523962 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.386564016 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.387202024 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.387208939 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.389322996 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.389403105 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.390458107 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.390475035 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.433267117 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.433289051 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.433917046 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.433927059 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.434309959 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.434324980 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.434432983 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.434458971 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.434911013 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.434916973 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.435025930 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.435031891 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.502194881 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.503011942 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.503123045 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.528409958 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.528672934 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.528758049 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.531203985 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.531213999 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.531294107 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.531424999 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.531764984 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.531825066 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:50.836443901 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.836513996 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:50.836590052 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.099946976 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.099946976 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.099987030 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.100001097 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.107110977 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.107110977 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.107146978 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.107157946 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.209430933 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 7, 2024 00:53:51.708429098 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.708475113 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.708499908 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.708508015 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.711775064 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.711812973 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.711827040 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.711833954 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.714504004 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.714524031 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:51.714534044 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:51.714539051 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.079482079 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.079507113 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.079638958 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.100517988 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.100553989 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.100622892 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.102612972 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.102649927 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.102711916 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.115586042 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.115598917 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.130858898 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.130882978 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.130942106 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.136775970 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.136787891 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.146164894 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.146178961 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.147732973 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.147749901 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.147814035 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.148020029 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.148030996 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.148376942 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.148394108 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.323786974 CEST	49673	443	192.168.2.9	204.79.197.203
Oct 7, 2024 00:53:52.765398026 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.775285006 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.795954943 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.809077024 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.823962927 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.959472895 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.959475994 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.959475994 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.959492922 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.959897041 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.999049902 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.999061108 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:52.999687910 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:52.999694109 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.000041008 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.000053883 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.000431061 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.000437021 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.001136065 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.001151085 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.001739979 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.001750946 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.004897118 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.004906893 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.005615950 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.005620956 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.006052017 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.006057978 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.098598003 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.099435091 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.099545002 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.099585056 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.099643946 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.099703074 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.103348970 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.103441000 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.103544950 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.104443073 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.104516029 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.104564905 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.404366970 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.404396057 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.404818058 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.404818058 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.404844046 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.404855967 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.405291080 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.405314922 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.405324936 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.405332088 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.417987108 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.418001890 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.418040037 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.418049097 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.419802904 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.419820070 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.419841051 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.419848919 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.483247995 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.483283043 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.483359098 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.485799074 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.485824108 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.485970020 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.486008883 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.486021042 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.488142014 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.488167048 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.488251925 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.488369942 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.488389969 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.488677979 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.488694906 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.490143061 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.490153074 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.490273952 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.490358114 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.490367889 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.504360914 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.504456997 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.504532099 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.504734993 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.504745007 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.504770041 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.504776001 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.509413958 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.509463072 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:53.509594917 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.509948969 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:53.509963989 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.132384062 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.158797979 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.162642002 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.166496038 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.174005985 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.271914959 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.271939039 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.271939039 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.271965981 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.271967888 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.385260105 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.385283947 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.385997057 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.386004925 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.391427994 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.391447067 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.391777039 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.391783953 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.408529043 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.408560991 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.409070015 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.409077883 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.411372900 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.411416054 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.412030935 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.412035942 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.412136078 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.412153006 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.412512064 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.412518024 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.488713980 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.488785982 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.488899946 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.489367962 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.489938974 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.490067959 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.509991884 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.510077000 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.510178089 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.514204025 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.514298916 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.514404058 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.514414072 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.514467955 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.514523029 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.611344099 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.611380100 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.611402988 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.611409903 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.612396002 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.612425089 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.612438917 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.612446070 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.614211082 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.614221096 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.614295959 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.614301920 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.621088028 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.621134996 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.623413086 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.623425961 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.623435974 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.623442888 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.800590992 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 7, 2024 00:53:54.848659039 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.848716974 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.848776102 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.856136084 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.856151104 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.889115095 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.889167070 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.889230013 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.889712095 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.889724970 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.889820099 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.894452095 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.894491911 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.894541025 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.895283937 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.895303965 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.897439003 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.897454977 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.900698900 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.900738001 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.900794029 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.900965929 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.900981903 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:54.901174068 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:54.901191950 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.035315037 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 7, 2024 00:53:55.511147976 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.512068033 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.512094021 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.513014078 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.513025045 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.537781000 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.538331985 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.538357019 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.539066076 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.539082050 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.542742014 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.543227911 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.543256044 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.543865919 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.543879032 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.550569057 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.550944090 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.550971031 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.551645041 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.551652908 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.567301989 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.567707062 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.567743063 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.568111897 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.568118095 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.614335060 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.614511013 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.614567041 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.614790916 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.614815950 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.614825964 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.614831924 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.617469072 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.617516994 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.617861032 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.618009090 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.618024111 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.639233112 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.639291048 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.639355898 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.644706011 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.644767046 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.644867897 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.646064043 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.646079063 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.646210909 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.646219015 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.647840977 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.647850037 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.647883892 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.647888899 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.652812958 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.652842999 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.652949095 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.653059959 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.653111935 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.653168917 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.667220116 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.667259932 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.667458057 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.667464972 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.667500973 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.667691946 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.667727947 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.667740107 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.667746067 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.672199011 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.672245979 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.672321081 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.718693018 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.718719959 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.718727112 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.718733072 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.722898960 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.722919941 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.729079008 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.729124069 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.729188919 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.730938911 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.730958939 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.731103897 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.731583118 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.731601000 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:55.731775999 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:55.731786013 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.325877905 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.326407909 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.326427937 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.326868057 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.326873064 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.379255056 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.379733086 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.379760981 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.380182028 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.380187988 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.412058115 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.412847996 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.412864923 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.413369894 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.413377047 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.432277918 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.432353973 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.432434082 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.432657003 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.432676077 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.432743073 CEST	49742	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.432749033 CEST	443	49742	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.433545113 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.434395075 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.434415102 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.434849977 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.434858084 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.437330961 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.437381983 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.437547922 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.437727928 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.437741995 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.458957911 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.459343910 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.459372044 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.459769011 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.459777117 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.483545065 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.483612061 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.483783960 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.483828068 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.483846903 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.483860970 CEST	49743	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.483865976 CEST	443	49743	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.486458063 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.486490965 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.486643076 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.486743927 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.486756086 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.496905088 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:56.496925116 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:56.497106075 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:56.497792006 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:56.497801065 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:56.497960091 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:56.498192072 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:56.498210907 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:56.498317003 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:56.498330116 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:56.516055107 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.516134977 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.516369104 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.516369104 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.516369104 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.519098043 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.519115925 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.519181013 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.519314051 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.519323111 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.541201115 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.541361094 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.541431904 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.541728020 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.541749001 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.541759014 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.541764975 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.544560909 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.544604063 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.544677019 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.544823885 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.544838905 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.567534924 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.567585945 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.567640066 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.567886114 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.567907095 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.567923069 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.567929029 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.570816040 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.570856094 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.570926905 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.571728945 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.571739912 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:56.713993073 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 7, 2024 00:53:56.714092970 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 7, 2024 00:53:56.819684029 CEST	49744	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:56.819710970 CEST	443	49744	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.082762957 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.093413115 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.093430996 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.093930960 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.093936920 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.124295950 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.133636951 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.133657932 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.134469032 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.134485960 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.183866978 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.184695959 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.184727907 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.187179089 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.187189102 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.191482067 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.191514015 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.191556931 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.191606045 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.192379951 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.192404032 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.192418098 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.192425966 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.193684101 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.193703890 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.194159985 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.194169998 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.209804058 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.229701996 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.229743004 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.229811907 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.230000019 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.230079889 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.230428934 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.230443001 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.240580082 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.240662098 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.240729094 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.263766050 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.263802052 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.263822079 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.263828993 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.286597967 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.286617994 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.289062023 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.290134907 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.290149927 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.292088032 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.292162895 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.293374062 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.293414116 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.293476105 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.294910908 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.294981003 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.295026064 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.295137882 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.295152903 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.295161963 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.295169115 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.295221090 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.295418978 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.295425892 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.295591116 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.295656919 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.295674086 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.296124935 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.296188116 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.296268940 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.296559095 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.296572924 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.296859026 CEST	49751	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.296866894 CEST	443	49751	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.298578978 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.299935102 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.299943924 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.300966024 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.301017046 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.301168919 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.301203966 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.301254034 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.302488089 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.302496910 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.302551985 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.302655935 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.302665949 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.302980900 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.303034067 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.303211927 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.303220987 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.330547094 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.330624104 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.330693007 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.331032038 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.331032038 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.331057072 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.331068993 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.333734989 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.333784103 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.333864927 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.334043980 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.334057093 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.341239929 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.341259003 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.356376886 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.356391907 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.387698889 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.399163008 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.872900963 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.872919083 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.872926950 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.872958899 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.872968912 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.872978926 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.873059034 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.873075962 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.873101950 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.873162031 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.875032902 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.875047922 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.875201941 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.875211000 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.923569918 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.946736097 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.957745075 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.957768917 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.958321095 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.958324909 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.966001987 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.966604948 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.966630936 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.967062950 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.967070103 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.969099045 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.969572067 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.969588041 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.970164061 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.970168114 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.993861914 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.994599104 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.994621038 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.994752884 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.995085955 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:57.995091915 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:57.995556116 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.995592117 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.995805025 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.996032000 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.996038914 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.996120930 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.996721029 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.996773005 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.996829033 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.997289896 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:57.997317076 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:57.997384071 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.004823923 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.005883932 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.005898952 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.005974054 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.005984068 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.006535053 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.006567001 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.035404921 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.036521912 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.036526918 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.036565065 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.036576033 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.036776066 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.036777020 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.036793947 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.036858082 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.038419962 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.038429022 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.038461924 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.038530111 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.038530111 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.038541079 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.038697004 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.040626049 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.040643930 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.040747881 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.040757895 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.040915966 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.042393923 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.042407990 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.042546034 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.042556047 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.042690039 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.044145107 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.044164896 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.046812057 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.047350883 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.047357082 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.047818899 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.047823906 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.073241949 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.073313951 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.073376894 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.076828003 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.076886892 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.077034950 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.082245111 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.082433939 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.082490921 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.101373911 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.101553917 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.101713896 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.149075031 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.149153948 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.149379015 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.200490952 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.200515032 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.200753927 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.200786114 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.200820923 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.200917006 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.200925112 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.200942039 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.201092005 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.202573061 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.202589989 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.202658892 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.202718019 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.202819109 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.203624964 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.203639984 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.203820944 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.203820944 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.203830957 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.203916073 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.205604076 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.205617905 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.205809116 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.205817938 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.205965042 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.206531048 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.206545115 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.206653118 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.206661940 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.206852913 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.207973957 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.208719969 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.208734989 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.208844900 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.208854914 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.209067106 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.286932945 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.286957979 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.287144899 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.287163973 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.287317038 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.364299059 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364320040 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364370108 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364440918 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364536047 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.364536047 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.364536047 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.364552021 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364607096 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364639997 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364674091 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.364685059 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.364722013 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.365020990 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365040064 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365088940 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.365098000 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365118027 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.365277052 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365292072 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365411043 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.365411043 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.365422010 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365725994 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.365830898 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.431231022 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431252003 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431262970 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431309938 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431322098 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431334019 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431370020 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.431413889 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431432962 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431453943 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.431457996 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.431489944 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.431508064 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.431524992 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.482925892 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.482965946 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.482980013 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.482989073 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.484271049 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.484280109 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.484289885 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.484296083 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.497627974 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.497627974 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.497661114 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.497672081 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.503478050 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.503515959 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.503525972 CEST	49758	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.503534079 CEST	443	49758	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.505454063 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.505470991 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.505506039 CEST	49757	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.505511045 CEST	443	49757	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.520339012 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.534101009 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:58.534146070 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:58.534208059 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:58.535223961 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:58.535271883 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:58.535373926 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:58.535595894 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:58.535614014 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:58.536079884 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:58.536092997 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:58.551465034 CEST	49749	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.551486015 CEST	443	49749	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.552242041 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.552261114 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.552320957 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.553888083 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.553899050 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.560056925 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:58.560069084 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:58.560131073 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:58.561526060 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:58.561538935 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:58.567157984 CEST	49750	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.567183971 CEST	443	49750	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.567373037 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.567390919 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.567488909 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.570261002 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.570276976 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.572658062 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:58.572699070 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:58.572911024 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:58.577069044 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:58.577095985 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:58.579570055 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:58.579586029 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:58.579644918 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:58.580265045 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:58.580272913 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:58.585406065 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:58.585458040 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:58.585519075 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:58.586723089 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:58.586747885 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:58.597224951 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.597263098 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.597315073 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.608028889 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:58.608066082 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:58.608124971 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:58.608808041 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:58.608823061 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:58.609126091 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.609139919 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.650957108 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.650995016 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.651062012 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.658870935 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:58.658910036 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:58.658960104 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:58.661706924 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:58.661726952 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:58.664858103 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.664910078 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.664973021 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.669538021 CEST	49781	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.674442053 CEST	53	49781	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.674504995 CEST	49781	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.674628973 CEST	49781	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.674715042 CEST	49781	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.675280094 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.675295115 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.679342031 CEST	53	49781	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.679644108 CEST	53	49781	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.692328930 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.692373037 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.692437887 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.693016052 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.693033934 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.693393946 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.693424940 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.697650909 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.697698116 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.697753906 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.702044964 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:58.702075958 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:58.794229031 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.799750090 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.799778938 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.800892115 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.800957918 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.801615000 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.801670074 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.802341938 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.802350998 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.805458069 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.805938959 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.805959940 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.806309938 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.807002068 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.807079077 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.807504892 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.810134888 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.810481071 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.810492039 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.810822010 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.811604023 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.811656952 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.811815977 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.851406097 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.851592064 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.851944923 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.851963043 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.853060961 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.853240013 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.853765965 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.853833914 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.853960991 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.853970051 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.854207039 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.855393887 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:58.874074936 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:58.874115944 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:58.874180079 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:58.877490044 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:58.877501011 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:58.885157108 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:58.885202885 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:58.885267973 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:58.885953903 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:58.885982037 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:58.897288084 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:58.897330046 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:58.897392035 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:58.899928093 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:58.899950981 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:58.914385080 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:58.957427025 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:58.957468033 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:58.957525969 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:58.958475113 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:58.958492994 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:58.980201960 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:58.980235100 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:58.980431080 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:58.981345892 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:58.981358051 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:59.004476070 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.004509926 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.004647970 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.006972075 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.006983995 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.051806927 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.052366972 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.052386999 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.053431988 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.053503036 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.055680037 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.055740118 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.056621075 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.056627035 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.071897030 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:59.072174072 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:59.072195053 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:59.073466063 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:59.073529959 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:59.076049089 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:59.076143026 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:59.101870060 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.117489100 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:59.117517948 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:53:59.138345003 CEST	53	49781	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:59.139298916 CEST	49781	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:59.144489050 CEST	53	49781	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:59.144530058 CEST	49781	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:59.164360046 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:53:59.188021898 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188066959 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188092947 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188108921 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.188122034 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188152075 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188169003 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.188173056 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188199997 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188210964 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.188215971 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188244104 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188260078 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.188263893 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188306093 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.188309908 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188333035 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.188370943 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.190928936 CEST	49773	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.190944910 CEST	443	49773	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.220792055 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:59.220985889 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:59.221000910 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:59.222013950 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:59.222078085 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:59.242436886 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.243207932 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.243231058 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.244055986 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.244060993 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.246901035 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.247072935 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.247134924 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.247984886 CEST	49761	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.248003006 CEST	443	49761	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.248533010 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.248570919 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.248631954 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.249253988 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.249269009 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.320039988 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:59.320483923 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:59.320499897 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:59.321604967 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:59.321679115 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:59.325366020 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.330102921 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:59.331032991 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:59.332173109 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.334717035 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:59.334733009 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:59.335418940 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:59.335434914 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:59.335860014 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:59.335921049 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:59.335932016 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.335948944 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.336503983 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.336509943 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.336719990 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.336749077 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.336899996 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:59.336960077 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:59.337378979 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.337383986 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.361485004 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.362658024 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.362678051 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.363099098 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.363105059 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.367019892 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:59.373989105 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:59.373996019 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:59.375066996 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:59.375149012 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:59.378221989 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.378285885 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.378339052 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.378485918 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.378506899 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.378525019 CEST	49775	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.378530979 CEST	443	49775	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.381062031 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.382832050 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.382908106 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.382930994 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.383712053 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.383718014 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.385279894 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.385302067 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.385365009 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.385521889 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.385535002 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.387753010 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.387768030 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.388801098 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.388875008 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.389856100 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389882088 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389889956 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389919043 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389930964 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389935017 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.389942884 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389955997 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.389982939 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.390007973 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.391102076 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.391402006 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.391422033 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.391470909 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.391478062 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.391506910 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.393520117 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.393529892 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.394501925 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.394573927 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.395487070 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.395536900 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.395886898 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.395895004 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.400844097 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.402568102 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.402575970 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.403676987 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.403760910 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.407277107 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.407296896 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.407313108 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.407352924 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.407362938 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.407392979 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.407416105 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.407850027 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.407928944 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.408117056 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.408126116 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.409297943 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.409315109 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.409357071 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.409362078 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.409420013 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.412046909 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.413182020 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.413189888 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.414469957 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.414545059 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.432878017 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.432948112 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.432996035 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.433109045 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.433178902 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.433218002 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.441020966 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.441049099 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.441118002 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.441128969 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.441390038 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.441411018 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.441423893 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.441428900 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.445605040 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.445626020 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.446259022 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446285009 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446291924 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446306944 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446319103 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446326971 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446357012 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.446377039 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.446396112 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.446445942 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.447108030 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.447124004 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.447179079 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.448070049 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.448096037 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.448124886 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.448138952 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.448153019 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.448172092 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.448189020 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.450217962 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.450227022 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.452981949 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.453021049 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.453083038 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.453214884 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.453229904 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.461239100 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.462435007 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.462502956 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.462548018 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.473241091 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.473259926 CEST	49782	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.473259926 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.473265886 CEST	443	49782	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.473588943 CEST	49762	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.473608017 CEST	443	49762	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.474169970 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.474180937 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.474237919 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.474883080 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.474893093 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.483858109 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.483954906 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.483999968 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.491420984 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.491437912 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.491446972 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.491452932 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.494817019 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.494853020 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.494936943 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.495234966 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.495249033 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.496351957 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.496371031 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.496440887 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.496714115 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:53:59.496726990 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:53:59.554639101 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.554661036 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.554678917 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.554711103 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.554742098 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.554755926 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.554780960 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.554919958 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.556150913 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.556170940 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.556363106 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.556369066 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.556452990 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.557411909 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.557437897 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.557580948 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.557586908 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.557642937 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.558387041 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.558409929 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.559025049 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.559030056 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.559088945 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.569566965 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:53:59.569600105 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:53:59.574553967 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:53:59.574765921 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:53:59.574779034 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:53:59.583296061 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:59.583298922 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:59.583446980 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:59.583458900 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:59.584104061 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:59.584115982 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:59.584239960 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:59.584331036 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:59.584831953 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:59.584831953 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.584857941 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.584882021 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.584918976 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:59.584950924 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.584969997 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.584997892 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.584999084 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.585298061 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.585930109 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.585989952 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.586004972 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.586067915 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.586085081 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.586085081 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.586096048 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.586432934 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.587316990 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.587333918 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.587409973 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.587409973 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.587418079 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.587575912 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.589061975 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.589080095 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.589175940 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.589175940 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.589184999 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.589278936 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.592442036 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:59.593545914 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:59.593564987 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:59.594115973 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:59.594242096 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:59.594904900 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:59.595272064 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:59.598470926 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:59.598635912 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:59.633153915 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:59.633176088 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:53:59.633174896 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:59.633174896 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:59.633178949 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:59.633178949 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.633197069 CEST	443	49769	13.35.58.10	192.168.2.9
Oct 7, 2024 00:53:59.633199930 CEST	443	49772	3.161.81.160	192.168.2.9
Oct 7, 2024 00:53:59.633213997 CEST	443	49785	192.0.73.2	192.168.2.9
Oct 7, 2024 00:53:59.633218050 CEST	443	49766	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.633243084 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:59.633243084 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.633286953 CEST	443	49776	18.239.85.223	192.168.2.9
Oct 7, 2024 00:53:59.633301020 CEST	443	49767	35.74.37.3	192.168.2.9
Oct 7, 2024 00:53:59.635704994 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:59.641002893 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:59.641030073 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:59.642163992 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:59.642327070 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:59.644406080 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:59.644491911 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:59.649281979 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:59.649288893 CEST	443	49789	142.250.185.238	192.168.2.9
Oct 7, 2024 00:53:59.651329041 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.655030966 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.655047894 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.656997919 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.657183886 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.658309937 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.658443928 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.680000067 CEST	49769	443	192.168.2.9	13.35.58.10
Oct 7, 2024 00:53:59.680000067 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:53:59.680015087 CEST	49766	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.680022955 CEST	49772	443	192.168.2.9	3.161.81.160
Oct 7, 2024 00:53:59.680022955 CEST	49785	443	192.168.2.9	192.0.73.2
Oct 7, 2024 00:53:59.680074930 CEST	49776	443	192.168.2.9	18.239.85.223
Oct 7, 2024 00:53:59.680490971 CEST	49767	443	192.168.2.9	35.74.37.3
Oct 7, 2024 00:53:59.695619106 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:59.695635080 CEST	443	49791	142.250.185.198	192.168.2.9
Oct 7, 2024 00:53:59.695660114 CEST	49789	443	192.168.2.9	142.250.185.238
Oct 7, 2024 00:53:59.699914932 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:59.700272083 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:59.700284958 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:59.701335907 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:59.701471090 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:59.702763081 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:59.702831984 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:59.711237907 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.711256027 CEST	443	49793	142.250.184.194	192.168.2.9
Oct 7, 2024 00:53:59.724611044 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.724821091 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.724822998 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.724854946 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.724886894 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.724900961 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.725002050 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.725887060 CEST	49763	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.725922108 CEST	443	49763	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.726835012 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.726881027 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.727266073 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.732392073 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.732414961 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.742505074 CEST	49791	443	192.168.2.9	142.250.185.198
Oct 7, 2024 00:53:59.744680882 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:59.750924110 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:59.750947952 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:59.752235889 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:59.754430056 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:59.754430056 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:59.754534960 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:59.758127928 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:59.758145094 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:53:59.758428097 CEST	49793	443	192.168.2.9	142.250.184.194
Oct 7, 2024 00:53:59.762314081 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.762340069 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.762434959 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.762447119 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.762780905 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.763118029 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.763134956 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.763434887 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.763442039 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.763597965 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.763808012 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.763823986 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.763910055 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.763910055 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.763917923 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.764626026 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.764645100 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.764725924 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.764725924 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.764734030 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.765474081 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.765489101 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.765541077 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.765548944 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.765604019 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.765604019 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.767427921 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.767452002 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.767570972 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.767570972 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.767577887 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.767765999 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.768554926 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.768570900 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.768652916 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.768652916 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.768660069 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.768786907 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.805005074 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:53:59.805075884 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:59.805104971 CEST	443	49786	91.228.74.200	192.168.2.9
Oct 7, 2024 00:53:59.814449072 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.814476013 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.818885088 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.818885088 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:53:59.818922043 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:53:59.824393988 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.824419975 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.824506998 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.824534893 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.824646950 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.828110933 CEST	49771	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.828123093 CEST	443	49771	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.828129053 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.828176022 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.828697920 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.829369068 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.829396963 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.851121902 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.851149082 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.851315022 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.851330996 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.851449966 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.851890087 CEST	49786	443	192.168.2.9	91.228.74.200
Oct 7, 2024 00:53:59.931524992 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.931555986 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.931653976 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.931653976 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.931668997 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.931720018 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.931796074 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:53:59.931838036 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.932089090 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.934468985 CEST	49764	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:53:59.934484005 CEST	443	49764	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012233973 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012258053 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012265921 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012296915 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012315989 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012331009 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012357950 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.012367964 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.012393951 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.012470007 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.014245987 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.014270067 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.014450073 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.014456034 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.056454897 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.065895081 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.067985058 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.068003893 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.069125891 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.071027994 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.071237087 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.071523905 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.079188108 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.083708048 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.083708048 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.083725929 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.083739042 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.100996017 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.101751089 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.101773024 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.103420973 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.103427887 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.115398884 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.137645006 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.139167070 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.139194012 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.142452002 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.142467976 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.147770882 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.149701118 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:54:00.150940895 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:54:00.150969982 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:54:00.150981903 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.151000023 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.151756048 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.151760101 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.152095079 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:54:00.152266979 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:54:00.153740883 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:54:00.153830051 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:54:00.157545090 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.159204960 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.159230947 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.159596920 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.159605980 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.181778908 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.181788921 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.181833982 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.181926012 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.181926012 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.181936026 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.182178020 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.182218075 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.182243109 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.182250977 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.182260990 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.182264090 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.182276964 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.182439089 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.183226109 CEST	49768	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.183239937 CEST	443	49768	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.184222937 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.184412003 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.184696913 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.186769962 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.186770916 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.186799049 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.186811924 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.192029953 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.192049026 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.192171097 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.192497969 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.192512989 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.200675964 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.200751066 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.202584982 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.202584982 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.202995062 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.203006029 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.206219912 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.206232071 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.206342936 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.210565090 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.210578918 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.243088007 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.243155956 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.243623972 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.243767977 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.243812084 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.243889093 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.243907928 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.246742010 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.246808052 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.247015953 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.247783899 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.247837067 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.247879982 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.247895956 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.247914076 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.247958899 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.247965097 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.250457048 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.250485897 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.250969887 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.251014948 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.251950026 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.252463102 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.252481937 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.257149935 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.257210016 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.257333040 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.257525921 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.257525921 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.257531881 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.257540941 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.261051893 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.261096001 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.265085936 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.265835047 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.265849113 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.273020983 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.273386002 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.273400068 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.274779081 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.274960041 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.275201082 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:54:00.275228024 CEST	443	49803	151.101.44.159	192.168.2.9
Oct 7, 2024 00:54:00.276077032 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.276077032 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.276180983 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.290972948 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.320777893 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.320796967 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.334922075 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.334939957 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.335480928 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.340159893 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.340286970 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.340775013 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.370455027 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.383397102 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.415744066 CEST	49803	443	192.168.2.9	151.101.44.159
Oct 7, 2024 00:54:00.436955929 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437011003 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437040091 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437067986 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437096119 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437099934 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.437118053 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437129974 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.437298059 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.437302113 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437494993 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437524080 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437551022 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.437556028 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437612057 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.437881947 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.442439079 CEST	49806	443	192.168.2.9	104.17.25.14
Oct 7, 2024 00:54:00.442454100 CEST	443	49806	104.17.25.14	192.168.2.9
Oct 7, 2024 00:54:00.499830961 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.499908924 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.503518105 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.522419930 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.613064051 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.613085032 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.613974094 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.615403891 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.615760088 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.615781069 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.655656099 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.663395882 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.673810005 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.673819065 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.674881935 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.675014019 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.675987959 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.676013947 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.676018953 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.676038980 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.714688063 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.715013027 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.715162992 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.751308918 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.751308918 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.751332045 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.811300039 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.815445900 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.815459967 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.816046000 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.816051006 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.843961000 CEST	49796	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.843982935 CEST	443	49796	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.847398996 CEST	49800	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.847431898 CEST	443	49800	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.876526117 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.898813963 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.906539917 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.912066936 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.912137985 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.912211895 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.914371014 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 7, 2024 00:54:00.914387941 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.918370008 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.930006027 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.939743996 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.939790964 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.939852953 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.942629099 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.942670107 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.942791939 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.943133116 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.943150043 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.943871021 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:00.943886995 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:00.944463015 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.944495916 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.945200920 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.945213079 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.945600033 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.948062897 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.948070049 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.951241970 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.951248884 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.957546949 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.957556009 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.959153891 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.959158897 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.960104942 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.960120916 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.960748911 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.960757971 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.963202000 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.963227034 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.963234901 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.963243008 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.973825932 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.973880053 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:00.973943949 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.974277020 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:00.974287987 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.043833971 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.043915987 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.043968916 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.044282913 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.044311047 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.044326067 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.044334888 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.047707081 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.047739029 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.047825098 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.048079014 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.048089981 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.057287931 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.057348967 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.057395935 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.057643890 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.057660103 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.057674885 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.057679892 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.060688972 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.060710907 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.060775995 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.060821056 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.060894012 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.060965061 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.060978889 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.060987949 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.061041117 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.061041117 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.061059952 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.061063051 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.062433004 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.062491894 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.062541962 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.062695980 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.062695980 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.062702894 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.062711954 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.064363956 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.064393997 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.064450979 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.064768076 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.064778090 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.065540075 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.065567970 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.065633059 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.065809965 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.065820932 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.096323967 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096354961 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096364021 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096386909 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096398115 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096407890 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096415997 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.096436977 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.096441984 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096455097 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.096474886 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.096565008 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.097531080 CEST	49807	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.097549915 CEST	443	49807	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.123994112 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124021053 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124027967 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124041080 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124049902 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124066114 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124073982 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.124083996 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124100924 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.124111891 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.124139071 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.125034094 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.125042915 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.125063896 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.125072956 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.125085115 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.125088930 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.125094891 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.125133038 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.125236988 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.293281078 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.293301105 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.293323994 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.293337107 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.293486118 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.293507099 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.293523073 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.293566942 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.294610977 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.294626951 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.294652939 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.294676065 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.294682980 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.294781923 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.296343088 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.296389103 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.296458006 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.296475887 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.296475887 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.296556950 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.297101021 CEST	49804	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.297116995 CEST	443	49804	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.625689030 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.669584990 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.669599056 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.670244932 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.670248985 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.703449965 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.704524040 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.709491014 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.726135015 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.726146936 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.727298975 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.727307081 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.727314949 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.727329016 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.728148937 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.728156090 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.729562044 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.731265068 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.731275082 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.732629061 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.732644081 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.732661963 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.732681990 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.733187914 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.733194113 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.733926058 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.739761114 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.746189117 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.746254921 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.746573925 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.746591091 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.746844053 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.747009039 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.755697012 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.755841970 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.756789923 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.756908894 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.757098913 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.757245064 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.769511938 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.769582033 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.770211935 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.771581888 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.771601915 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.771621943 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.771627903 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.778949022 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.778985023 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.779275894 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.779872894 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.779884100 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.799395084 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.799405098 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.823328972 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.823415041 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.823678970 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.823870897 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.823870897 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.823894024 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.823903084 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.824543953 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.824609041 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.824878931 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.825949907 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.825965881 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.829547882 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.829579115 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.830118895 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.830833912 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.830848932 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.831032038 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.831080914 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.831336021 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.831907034 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.831918955 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.832146883 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.832149982 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.832149982 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.832175970 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.832180023 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.833887100 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.833898067 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.835750103 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.835784912 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.836275101 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.836781979 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.836792946 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.842159033 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.842220068 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.842578888 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.842578888 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.842638969 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.842653036 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.845560074 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.845582008 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.845664024 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.846935034 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:01.846942902 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:01.856904984 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.856928110 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:01.857384920 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.857384920 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:01.857415915 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.361017942 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.361061096 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.361138105 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.361155987 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.361170053 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.361229897 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.366873026 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.366898060 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.366920948 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.367059946 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.367059946 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.367086887 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.367173910 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.368969917 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.368988037 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.370332003 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.370332003 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.370342970 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.392594099 CEST	49814	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.392617941 CEST	443	49814	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.415227890 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.527523994 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.527590990 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.527616024 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.527631044 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.527801037 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.527801037 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.528171062 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.528220892 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.528346062 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.528346062 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.528354883 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.528414965 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.532079935 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.532134056 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.532193899 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.532208920 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.532253027 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.532253027 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.532612085 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.532692909 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.532701015 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.532799959 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.532951117 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.532951117 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.546478987 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.546706915 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.547116995 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.547146082 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.547427893 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.547445059 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.547597885 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.547610044 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.547910929 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.547916889 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.555124044 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.555640936 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.555665970 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.556092978 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.556729078 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.556730032 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.556739092 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.556746006 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.556770086 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.556787968 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.559304953 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.559746027 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.559752941 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.560300112 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.560303926 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646179914 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646266937 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646326065 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.646531105 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.646531105 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.646550894 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646559954 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646819115 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646884918 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.646933079 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.647047997 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.647047997 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.647067070 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.647077084 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.649672985 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.650337934 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.650362968 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.650372982 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.650412083 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.650430918 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.650460958 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.650578022 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.650585890 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.650847912 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.650860071 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.650991917 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.651007891 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.651638031 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.651719093 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.652271986 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.652334929 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.652714968 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.652720928 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.660053015 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.660108089 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.660187006 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.660329103 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.660339117 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.660353899 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.660358906 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.662214994 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.662357092 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.662410975 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.662612915 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.662612915 CEST	49822	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.662619114 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.662626982 CEST	443	49822	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.663111925 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.663131952 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.663218975 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.663408995 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.663414955 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.665287018 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.665301085 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.665355921 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.665520906 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.665534019 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.681345940 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.681416035 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.681483984 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.681747913 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.681759119 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.681811094 CEST	49824	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.681817055 CEST	443	49824	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.684432983 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.684477091 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.684546947 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.684684038 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:02.684694052 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:02.814214945 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.818339109 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.818376064 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.818458080 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.819401026 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.819413900 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.824179888 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.824197054 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.824278116 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.825072050 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.825079918 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:02.837040901 CEST	49815	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:02.837068081 CEST	443	49815	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074531078 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074558020 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074567080 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074646950 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074661970 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074667931 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074668884 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.074769974 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.074780941 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.074886084 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.100866079 CEST	49827	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.100882053 CEST	443	49827	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.246556997 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.290092945 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.304397106 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.307913065 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.308659077 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.338546991 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.341027975 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.341069937 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.341761112 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.341768026 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.342421055 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.342443943 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.343034983 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.343040943 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.343571901 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.343586922 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.344232082 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.344237089 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.344780922 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.344788074 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.345444918 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.345449924 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.345886946 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.345899105 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.346548080 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.346551895 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.442250013 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.442323923 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.442367077 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.443123102 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.443196058 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.443223953 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.443404913 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.443425894 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.443439007 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.443444967 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.444423914 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.444479942 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.444520950 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.444772959 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.444834948 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.444866896 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.448038101 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.449462891 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.449512959 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.449836969 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.449836969 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.449851036 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.449862003 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.451313019 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.451328039 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.451343060 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.451349020 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.452613115 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.452613115 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.452619076 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.452625036 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.453607082 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.453624010 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.453644037 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.453648090 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.459079981 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.459103107 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.459198952 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.459476948 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.459511042 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.459567070 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.461230040 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.461266994 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.462152004 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.462949991 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.462958097 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.463113070 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.465950966 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.465964079 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.466011047 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.466203928 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.466214895 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.466417074 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.466428041 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.466438055 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.466444969 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.467048883 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.467048883 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:03.467066050 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.467080116 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:03.619874954 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.620222092 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.620250940 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.620629072 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.620949984 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.621007919 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.621097088 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.631103992 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.631376982 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.631406069 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.631762981 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.632147074 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.632219076 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.632296085 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.663393021 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:03.665067911 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:03.675393105 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.102293015 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.104352951 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104383945 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104391098 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104413986 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104458094 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.104487896 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104502916 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104517937 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.104530096 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.104538918 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.104548931 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.104571104 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.104643106 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.104733944 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.104744911 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.105200052 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.105205059 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.105606079 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.105644941 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.105971098 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.105978966 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.107270956 CEST	49834	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.107287884 CEST	443	49834	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.110029936 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.112468004 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.112483025 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.113014936 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.113018990 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.116086006 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.117013931 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.117033958 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.117436886 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.117441893 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.134605885 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.135155916 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.135183096 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.135720015 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.135736942 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.200773954 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.200799942 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.200872898 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.200886011 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.201019049 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.201075077 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.201204062 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.201219082 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.201235056 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.201241016 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.204778910 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.204824924 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205100060 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205127001 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205157042 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.205157042 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.205192089 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205193043 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.205204010 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205251932 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.205355883 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.205359936 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205377102 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.205516100 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.205547094 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.207459927 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.207469940 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.207494974 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.207549095 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.207684040 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.207694054 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.213267088 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.213313103 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.213376999 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.213594913 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.213603973 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.213608980 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.213613033 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.215835094 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.215852022 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.215914965 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.216062069 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.216065884 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.220056057 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.220127106 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.220227957 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.220293045 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.220308065 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.220324993 CEST	49835	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.220330000 CEST	443	49835	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.222439051 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.222471952 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.222696066 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.222696066 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.222724915 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237435102 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237457037 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237509966 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.237536907 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237597942 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237749100 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.237770081 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237782001 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.237788916 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.237797976 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.237802029 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.240072966 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.240098000 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.240264893 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.240384102 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.240392923 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.241502047 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.241529942 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.241548061 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.241575956 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.241590977 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.241615057 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.241638899 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.242718935 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.242738962 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.242770910 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.242777109 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.242806911 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.290071964 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.413516045 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.413542986 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.413592100 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.413619041 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.413644075 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.413657904 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.414719105 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.414741039 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.414793015 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.414799929 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.414834023 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.414854050 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.416636944 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.416656017 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.416701078 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.416717052 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.416723013 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.416779041 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.416798115 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.416804075 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.416838884 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.417229891 CEST	49833	443	192.168.2.9	118.27.95.26
Oct 7, 2024 00:54:04.417243004 CEST	443	49833	118.27.95.26	192.168.2.9
Oct 7, 2024 00:54:04.838040113 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.838737965 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.838747025 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.839376926 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.839381933 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.851066113 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.851600885 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.851610899 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.852014065 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.852019072 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.866394043 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.866863012 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.866882086 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.867532015 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.867538929 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.870691061 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.871332884 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.871351957 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.871778965 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.871788025 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.921370029 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.921978951 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.921998978 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.922367096 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.922372103 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.935990095 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.936012983 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.936089993 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.936109066 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.936528921 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.936539888 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.936553955 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.936737061 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.936772108 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.936810970 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.940468073 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.940505981 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.940648079 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.940922022 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.940934896 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.950973988 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.951025009 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.951064110 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.951289892 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.951289892 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.951301098 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.951308966 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.954219103 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.954236984 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.954293013 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.954447031 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.954457998 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.970238924 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.970392942 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.970443010 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.970520973 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.970537901 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.970549107 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.970555067 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.973361969 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.973396063 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.973654032 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.973654032 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.973679066 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.974123955 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.974251032 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.974297047 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.974397898 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.974402905 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.974415064 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.974419117 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.976619959 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.976649046 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:04.976717949 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.976901054 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:04.976912022 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.032052040 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.032171011 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.032247066 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.032463074 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.032495022 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.036216974 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.036257029 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.036344051 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.036508083 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.036521912 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.649998903 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.650595903 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.650609970 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.651120901 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.651125908 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.653733969 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.653780937 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.654246092 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.654278040 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.654520035 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.654534101 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.654539108 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.654545069 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.654958963 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.654966116 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.668858051 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.669357061 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.669390917 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.669873953 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.669883966 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.750360966 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.750735044 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.750809908 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.751230955 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.751247883 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.751262903 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.751276970 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.751703978 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.752557993 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.752583027 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.753019094 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.753024101 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754383087 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754453897 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754535913 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.754767895 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.754784107 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754846096 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754861116 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.754867077 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754903078 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.754951954 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.755139112 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.755148888 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.755162001 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.755168915 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.755176067 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.755198002 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.755253077 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.755448103 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.755460024 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.758120060 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.758153915 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.758291006 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.758575916 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.758594990 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.760137081 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.760171890 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.760474920 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.760679007 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.760689974 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.773477077 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.773545027 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.773765087 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.773804903 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.773814917 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.773822069 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.773827076 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.777025938 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.777060986 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.778060913 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.778227091 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.778243065 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.855082989 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.855144978 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.855233908 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.855525017 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.855540037 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.855552912 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.855559111 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.858833075 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.858874083 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:05.858944893 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.859160900 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:05.859172106 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.419239044 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.419722080 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.419744968 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.420232058 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.420237064 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.422988892 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.425405025 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.425419092 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.425843954 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.425848007 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.431823015 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.432240009 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.432271004 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.432703018 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.432708979 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.439640045 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.439966917 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.439975023 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.440380096 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.440385103 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.499474049 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.499939919 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.499969006 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.500690937 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.500701904 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.521898031 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.522098064 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.522207022 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.522581100 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.522603035 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.522615910 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.522624016 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.527053118 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.527071953 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.527127981 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.527194977 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.527221918 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.527573109 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.527599096 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.527622938 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.527631998 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.536273003 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.536406994 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.536464930 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.536521912 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.536859035 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.536901951 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.536969900 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.537241936 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.537254095 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.538064957 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.538096905 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.538111925 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.538119078 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.542985916 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.543015957 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.543095112 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.543216944 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.543226957 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.544270039 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.544357061 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.544528008 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.544564962 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.544569016 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.544569016 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.544589043 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.544595003 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.544612885 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.545360088 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.545372009 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.547539949 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.547586918 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.547730923 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.547854900 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.547868967 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.597815990 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.597896099 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.597946882 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.598169088 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.598192930 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.598206043 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.598212004 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.601432085 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.601453066 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:06.601526976 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.601670980 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:06.601677895 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.185267925 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.187618971 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.187647104 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.188098907 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.188107967 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.194030046 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.198108912 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.198117971 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.198858023 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.198863029 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.199430943 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.201354027 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.201364994 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.202789068 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.202792883 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.218337059 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.220567942 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.220601082 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.221034050 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.221040010 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.266403913 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.267194033 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.267208099 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.268137932 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.268141985 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.283879042 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.284209967 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.284261942 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.284439087 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.284460068 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.284472942 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.284478903 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.291362047 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.291404009 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.291465998 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.295790911 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.295798063 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.298679113 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.298903942 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.298959017 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.299182892 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.299194098 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.299205065 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.299211025 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.305250883 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.305685997 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.305747986 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.306327105 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.306333065 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.306348085 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.306351900 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.310055971 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.310112000 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.310192108 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.310434103 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.310451984 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.311131954 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.311166048 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.311240911 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.315396070 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.315417051 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.328610897 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.328674078 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.328707933 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.328725100 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.328767061 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.329334021 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.329353094 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.329363108 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.329369068 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.338123083 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.338165998 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.338221073 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.338906050 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.338920116 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.368575096 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.368735075 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.368778944 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.369155884 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.369172096 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.369184017 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.369189978 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.375005960 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.375041962 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.375102043 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.375291109 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.375302076 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.945596933 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.945664883 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.947329044 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.947354078 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.948370934 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.948376894 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.949119091 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.949145079 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.950002909 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.950018883 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.971050978 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.971995115 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.972016096 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.973115921 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.973130941 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.982702971 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.983848095 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.983865023 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:07.984962940 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:07.984971046 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.042123079 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.043627977 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.043654919 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.044150114 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.044224024 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.044295073 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.044332027 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.044352055 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.044461966 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.044471025 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.044636011 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.045413971 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.045437098 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.045458078 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.045465946 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.045742035 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.046281099 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.046349049 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.046787977 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.046804905 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.046818972 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.046824932 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.054970026 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.055002928 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.055128098 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.056068897 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.056101084 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.056286097 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.056806087 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.056809902 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.056819916 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.056839943 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.074311972 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.074902058 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.074975014 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.075018883 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.075035095 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.075052977 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.075058937 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.079404116 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.079443932 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.079569101 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.079992056 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.080003977 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.082617044 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.082782030 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.082823992 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.082850933 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.083059072 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.083210945 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.083210945 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.083229065 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.083239079 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.087001085 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.087043047 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.087341070 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.087690115 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.087704897 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.144994020 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.145607948 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.145673037 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.145742893 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.145761967 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.145792961 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.145800114 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.150341034 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.150382042 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.150717974 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.150717974 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.150772095 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.694881916 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.695940018 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.695952892 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.696877003 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.696882010 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.700397968 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.701201916 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.701217890 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.702204943 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.702208996 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.722966909 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.723943949 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.723963976 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.725661993 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.725677967 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.726066113 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.726783991 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.726800919 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.727325916 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.727332115 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.786854029 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.787817001 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.787837029 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.788522959 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.788528919 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.794450998 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.794641018 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.794698954 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.795689106 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.795727015 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.804500103 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.804572105 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.804620981 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.805008888 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.805058956 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.805126905 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.805329084 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.805335999 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.815762997 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.815762997 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.815788984 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.815803051 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.822997093 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823012114 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.823050022 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.823107958 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.823117971 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823182106 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823184013 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.823259115 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823400974 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823400974 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823421001 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.823431969 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.823674917 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.823689938 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.828048944 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.828567028 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.828665972 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.828665972 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.828665972 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.832355022 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.832401037 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.832485914 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.832623959 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.832638979 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.835839987 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.835869074 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.835927963 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.836182117 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.836191893 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.885371923 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.886025906 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.886085987 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.888374090 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.888406992 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.895529032 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.895584106 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.895652056 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.896178007 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:08.896190882 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:08.965867996 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:54:08.965955973 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:54:08.966007948 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:54:09.040162086 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.040210009 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.161659002 CEST	49774	443	192.168.2.9	44.215.138.240
Oct 7, 2024 00:54:09.161694050 CEST	443	49774	44.215.138.240	192.168.2.9
Oct 7, 2024 00:54:09.231911898 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:54:09.231978893 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:54:09.232023954 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:54:09.441368103 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.443764925 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.443788052 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.444540024 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.444546938 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.468204975 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.470592022 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.470618963 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.471551895 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.471558094 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.475090027 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.479283094 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.479296923 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.480329037 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.480343103 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.494323969 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.495964050 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.495976925 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.496954918 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.496959925 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.541456938 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.541536093 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.541593075 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.546456099 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.569299936 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.569374084 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.569495916 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.569591999 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.575263977 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.575556040 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.575828075 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.586954117 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.593133926 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.593163013 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.593183041 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.593190908 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.596942902 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.596966028 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.597804070 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.597815990 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.598195076 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.598227024 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.599932909 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.599941969 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.600686073 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.601031065 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.601095915 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.615197897 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.615237951 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.694447041 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.694775105 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.694837093 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.767419100 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.767456055 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.767473936 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.767481089 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.772532940 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.772577047 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.772658110 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.773715973 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.773730993 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.773853064 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.776938915 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.776978970 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.777513027 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.777724028 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.777740955 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.778445959 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.778462887 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.779731989 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.779750109 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.780209064 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.780242920 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.780337095 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.780884027 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.780929089 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.781003952 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.781100988 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.781111002 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:09.781121016 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:09.781136036 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.113554955 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:54:10.113631964 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:54:10.113780022 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:54:10.746783972 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.747668982 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.747915983 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.747929096 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.749136925 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.749142885 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.749799967 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.749850035 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.750606060 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.750622988 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.760215044 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.761775017 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.762823105 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.766053915 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.766082048 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.767497063 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.767508984 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.767759085 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.767776012 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.768882036 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.768903017 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.769594908 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.769623041 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.770186901 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.770200968 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.845252037 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.845326900 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.845387936 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.846167088 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.846189022 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.846201897 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.846209049 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.847819090 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.847887039 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.847938061 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.849371910 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.849395037 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.849452972 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.849458933 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.860028028 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.860090017 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.860169888 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.860446930 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.860490084 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.860757113 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.860768080 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.860971928 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.860971928 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.861018896 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.864626884 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.864656925 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.864701986 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.864710093 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.864756107 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.865067959 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.865086079 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.865119934 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.865125895 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.866153002 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.866238117 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.866281986 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.866329908 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.866329908 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.867316008 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.867397070 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.867448092 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.868376017 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.868376017 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.868397951 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.868408918 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.868736982 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.868762016 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.868779898 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.868788004 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.874077082 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.874126911 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.874193907 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.875897884 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.875916958 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.878353119 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.878376007 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.878438950 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.878703117 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.878716946 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.883475065 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.883498907 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:10.883585930 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.884241104 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:10.884249926 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.154458046 CEST	49784	443	192.168.2.9	133.125.20.8
Oct 7, 2024 00:54:11.154496908 CEST	443	49784	133.125.20.8	192.168.2.9
Oct 7, 2024 00:54:11.154665947 CEST	49779	443	192.168.2.9	172.217.16.132
Oct 7, 2024 00:54:11.154704094 CEST	443	49779	172.217.16.132	192.168.2.9
Oct 7, 2024 00:54:11.513669014 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.514220953 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.514240026 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.516249895 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.516625881 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.516638994 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.516881943 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.516894102 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.517102003 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.517106056 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.519272089 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.519782066 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.519794941 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.520148039 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.520159960 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.523664951 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.524008989 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.524029016 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.524528980 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.524535894 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.553901911 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.554476023 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.554488897 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.554933071 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.554945946 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.614989996 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.615099907 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.615138054 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.615196943 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.615365982 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.615365982 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.615390062 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.615398884 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.618505001 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.618541956 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.618769884 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.619015932 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.619024992 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.619364977 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.619628906 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.619730949 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.619781017 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.619781017 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.619796991 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.619807005 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.622119904 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.622133017 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.622205973 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.622355938 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.622363091 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.624126911 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.624308109 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.624356031 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.624414921 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.624423981 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.624444962 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.624449015 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.626498938 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.626523972 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.626662016 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.626826048 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.626835108 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.656296015 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.657161951 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.657207966 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.657237053 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.657342911 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.657342911 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.657342911 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.657838106 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.657895088 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.658143044 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.658143044 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.658143044 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660412073 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660413027 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660439968 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.660439968 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.660512924 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660619974 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660784960 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660792112 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.660867929 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.660878897 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.962552071 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.962591887 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:11.962871075 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:11.962902069 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.257826090 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.258408070 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.258428097 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.259282112 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.259287119 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.291291952 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.292299986 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.292315006 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.292949915 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.292954922 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.297388077 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.297908068 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.297914028 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.298444986 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.298449039 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.299158096 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.301239967 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.301598072 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.301621914 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.302606106 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.302606106 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.302625895 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.302639961 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.303143024 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.303149939 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.360971928 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.361028910 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.361074924 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.361140966 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.361512899 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.361535072 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.361547947 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.361555099 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.364658117 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.364706993 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.364871025 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.365114927 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.365127087 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.397433043 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.397605896 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.397757053 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.397809029 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.397824049 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.397834063 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.397840023 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.401923895 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.401968956 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.402017117 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.402019024 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.402264118 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.402264118 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.402266026 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.402297974 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.402303934 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.402306080 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.402317047 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.402321100 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.406496048 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.406497002 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.406554937 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.406569958 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.406603098 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.406652927 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.406775951 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.406775951 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.413381100 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.413405895 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.413417101 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.413423061 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.413505077 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.413526058 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.413572073 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.413578033 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.414088964 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.414132118 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.414264917 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.414973974 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.414997101 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.584680080 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.584724903 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.585486889 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.586218119 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.586267948 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.586333036 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.586442947 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.586462975 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:12.586556911 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:12.586569071 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.028269053 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.028893948 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.028908968 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.029421091 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.029427052 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.066519022 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.067167997 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.067193031 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.067255020 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.067538977 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.067548990 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.067857981 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.067862034 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.067974091 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.067987919 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.131793022 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.131881952 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.131938934 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.132148981 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.132164001 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.132185936 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.132191896 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.135487080 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.135601044 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.135703087 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.135858059 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.135885954 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.236054897 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.236876011 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.236938953 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.237343073 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.237343073 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.237363100 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.237373114 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.241010904 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.241065025 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.241162062 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.241307974 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.241318941 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.244288921 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.244920015 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.244935989 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.244966030 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.245002985 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.245053053 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.245151043 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.245151043 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.245388031 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.245388031 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.245399952 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.245412111 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.245892048 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.245897055 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.248893976 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.248938084 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.249016047 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.249237061 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.249248028 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.305696964 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.306418896 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.306467056 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.306900024 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.306906939 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.402715921 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.402750015 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.402806997 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.402808905 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.402863979 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.403011084 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.403026104 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.403073072 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.403079033 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.406079054 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.406111002 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.406188011 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.406462908 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.406474113 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.412666082 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.412847996 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.412904024 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.412983894 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.412997961 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.413012028 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.413017988 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.415929079 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.416047096 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.416136980 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.416419983 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.416455984 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.845433950 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.846432924 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.846432924 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.846460104 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.846477985 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.945832014 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.947072029 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.947072029 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.947103977 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.947122097 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.948364019 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.948625088 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.948692083 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.948915005 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.948931932 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.948997974 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.949322939 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.949322939 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.949338913 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.949350119 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.949379921 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.949399948 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.952573061 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.952625036 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:13.952946901 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.952946901 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:13.952980995 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.057992935 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.058639050 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.058657885 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.059220076 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.059226990 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.060484886 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.060621023 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.060770035 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.060884953 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.060925007 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.060997009 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.061091900 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.061091900 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.061140060 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.061150074 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.061171055 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.061316013 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.061357021 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.061357021 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.061378956 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.061388969 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.064203978 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.064246893 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.064275026 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.064327002 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.064362049 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.064579010 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.064580917 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.064598083 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.064636946 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.064654112 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.077172995 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.078214884 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.078214884 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.078243017 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.078262091 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.182080030 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.182212114 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.182544947 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.182544947 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.183830976 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.183849096 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.188574076 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.188632011 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.189254045 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.189254045 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.189287901 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.217879057 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.218087912 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.218148947 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.218302965 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.218378067 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.218378067 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.218401909 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.218424082 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.226454973 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.226501942 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.226844072 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.226844072 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.226875067 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.637015104 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.637662888 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.637677908 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.638381004 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.638385057 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.714297056 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.715068102 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.715090990 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.715634108 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.715639114 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.732538939 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.733057022 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.733084917 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.733660936 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.733675957 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.744757891 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.745194912 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.745249033 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.745358944 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.745379925 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.745393991 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.745398998 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.749501944 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.749557018 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.749773026 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.749773026 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.749811888 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.819152117 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.819231033 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.819286108 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.819463968 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.819489956 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.819505930 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.819515944 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.824567080 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.824598074 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.824678898 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.825118065 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.825133085 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.835797071 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.836390972 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.836407900 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.837543011 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.837553024 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.839509964 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.839570999 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.839615107 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.839782953 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.839803934 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.839821100 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.839831114 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.843379974 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.843425989 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.843599081 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.843780041 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.843790054 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.885360956 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.885984898 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.886008024 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.886583090 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.886588097 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.937803030 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.937889099 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.937944889 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.938153982 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.938175917 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.938194990 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.938201904 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.942401886 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.942450047 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.942580938 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.942708969 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.942720890 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.987627029 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.987710953 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.987763882 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.988305092 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.988318920 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.988328934 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.988334894 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.992058992 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.992098093 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:14.992172956 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.992307901 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:14.992331028 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.399152994 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.408759117 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.408782005 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.409778118 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.409785032 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.488348007 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.489293098 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.489326000 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.489861965 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.489867926 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.502599001 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.503261089 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.503271103 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.504050970 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.504061937 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.506937981 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.507545948 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.507688046 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.508558035 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.508558035 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.508582115 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.508595943 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.532700062 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.532757044 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.532824993 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.533302069 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.533313990 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.580430984 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.582336903 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.582336903 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.582370996 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.582392931 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.587899923 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.588186979 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.588241100 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.588342905 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.588342905 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.588545084 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.588560104 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.592597961 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.592645884 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.592787027 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.592917919 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.592943907 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.606601954 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.606992960 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.607212067 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.607212067 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.607212067 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.610135078 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.610186100 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.610547066 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.612521887 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.612544060 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.642810106 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.644565105 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.644603014 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.645817995 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.645824909 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.699486971 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.699927092 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.700043917 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.700263977 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.700263977 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.700287104 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.700290918 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.703432083 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.703480959 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.703557014 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.703717947 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.703730106 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.743175983 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.743519068 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.743668079 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.743699074 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.743714094 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.744488001 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.744503021 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.746861935 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.746917009 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.747165918 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.747165918 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.747205019 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:15.918452024 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:15.918481112 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.177517891 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.178492069 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.178570986 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.178685904 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.178700924 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.227344036 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.227925062 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.227969885 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.228410006 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.228415012 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.259006023 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.259650946 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.259679079 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.260133982 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.260138035 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.277790070 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.277863979 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.278028965 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.278259039 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.278280973 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.278312922 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.278317928 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.280956984 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.281007051 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.281188011 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.281342983 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.281353951 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.326762915 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.326788902 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.326853991 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.326960087 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.327379942 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.327379942 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.327444077 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.327472925 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.330468893 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.330513000 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.330688953 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.331130028 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.331151009 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.361157894 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.361248016 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.361309052 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.361491919 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.361491919 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.361757994 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.361757994 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.361774921 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.361785889 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.364680052 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.365180969 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.365247011 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.366091967 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.366091967 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.366127014 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.366157055 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.366158009 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.366328955 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.366338968 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.381755114 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.382350922 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.382368088 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.382829905 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.382836103 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.468018055 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.468051910 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.468118906 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.468163013 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.468415022 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.468415022 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.468450069 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.468478918 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.468487024 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.471525908 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.471575975 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.472076893 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.472078085 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.472111940 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.480489016 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.480546951 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.480763912 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.480909109 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.480909109 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.480930090 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.480940104 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.484452963 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.484496117 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.484585047 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.484896898 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.484901905 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.921641111 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.922192097 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.922259092 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.922924995 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.922940969 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.970014095 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.970778942 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.970808983 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:16.971263885 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:16.971268892 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.014159918 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.014713049 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.014785051 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.015506029 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.015521049 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.021274090 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.021302938 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.021361113 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.021394968 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.021426916 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.021644115 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.021662951 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.021693945 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.021699905 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.024899960 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.024952888 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.025029898 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.025196075 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.025206089 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.069232941 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.069621086 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.069705963 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.069811106 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.069859028 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.069891930 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.069909096 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.072938919 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.073009968 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.073097944 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.073411942 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.073447943 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.106645107 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.107203960 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.107250929 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.107855082 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.107872963 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.120651007 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.120668888 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.120767117 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.120800018 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.120896101 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.120955944 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.121324062 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.121341944 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.121443033 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.121448994 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.122155905 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.122730017 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.122761011 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.123325109 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.123337030 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.125760078 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.125866890 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.126081944 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.126229048 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.126252890 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.206610918 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.206654072 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.206723928 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.206748009 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.206814051 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.206969976 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.206969976 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.207017899 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.207051992 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.210766077 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.210828066 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.210905075 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.211077929 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.211092949 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.219958067 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.220669985 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.220724106 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.220748901 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.220798969 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.220849991 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.220884085 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.220906973 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.220918894 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.224389076 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.224459887 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.224534035 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.224751949 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.224766016 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.864461899 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.865113020 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.865148067 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.865582943 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.865591049 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.969100952 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.969537020 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.969639063 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.969639063 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.970459938 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.970479965 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.972505093 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.972553015 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:17.972807884 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.972807884 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:17.972840071 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.047288895 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.048274994 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:18.048275948 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:18.048296928 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.048311949 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.048491001 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.049104929 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:18.049104929 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:18.049130917 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.049145937 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.050122976 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.050457001 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:18.050482035 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 7, 2024 00:54:18.050672054 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 7, 2024 00:54:18.050677061 CEST	443	49923	13.107.246.45	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 00:53:54.862670898 CEST	53	50270	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:54.912929058 CEST	53	49851	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:55.952178955 CEST	53	52447	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:56.061844110 CEST	54328	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:56.062378883 CEST	64454	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:56.489758015 CEST	53	54328	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:56.495738029 CEST	53	64454	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.052850008 CEST	53	52119	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.054241896 CEST	53	59250	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.056900978 CEST	60555	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.057041883 CEST	51641	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.058882952 CEST	56243	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.059017897 CEST	56228	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.065104961 CEST	53	60555	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.065385103 CEST	53	51641	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.066694975 CEST	53	50644	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.082973957 CEST	52550	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.083147049 CEST	60387	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.089235067 CEST	53	56243	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.110944986 CEST	53	56228	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.111002922 CEST	53	52550	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.128213882 CEST	53	60387	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.537755013 CEST	62235	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.538147926 CEST	63408	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.539602995 CEST	56175	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.540272951 CEST	54018	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.547703028 CEST	53	63408	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.556655884 CEST	53	62235	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.560997963 CEST	61318	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.561141968 CEST	63913	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.567641973 CEST	53	61318	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.576672077 CEST	64932	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.576833963 CEST	56402	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.583472013 CEST	53	64932	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.584245920 CEST	53	56402	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.591037035 CEST	64677	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.591691017 CEST	51774	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.597810984 CEST	53	64677	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.611212969 CEST	53705	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.611706018 CEST	60396	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.618432045 CEST	53	60396	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.627708912 CEST	53	51774	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.649439096 CEST	54023	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.650001049 CEST	51016	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.656302929 CEST	53	54023	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.656522036 CEST	53	51016	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.660224915 CEST	63296	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.660696983 CEST	50282	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.666755915 CEST	53	63296	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.670603037 CEST	53	50282	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.804326057 CEST	53	56175	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.876409054 CEST	59972	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.876804113 CEST	56880	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.882982016 CEST	53	59972	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.883296967 CEST	53	56880	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.888039112 CEST	58497	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.888534069 CEST	64074	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.894871950 CEST	53	58497	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.895165920 CEST	53	64074	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.907186031 CEST	53	49484	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.923155069 CEST	49664	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.923537016 CEST	50426	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.929708004 CEST	53	49664	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.953233004 CEST	53	50426	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.971321106 CEST	62073	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.971679926 CEST	63209	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.978076935 CEST	53	62073	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.978302002 CEST	53	63209	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.989830017 CEST	53	49396	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:58.995167971 CEST	51099	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:58.995698929 CEST	59235	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:59.001997948 CEST	53	51099	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:59.002271891 CEST	53	59235	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:59.034117937 CEST	53	54018	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:59.806879044 CEST	60993	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:59.806879044 CEST	58701	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:53:59.813488007 CEST	53	58701	1.1.1.1	192.168.2.9
Oct 7, 2024 00:53:59.813499928 CEST	53	60993	1.1.1.1	192.168.2.9
Oct 7, 2024 00:54:00.030052900 CEST	53	55319	1.1.1.1	192.168.2.9
Oct 7, 2024 00:54:01.374056101 CEST	55335	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:54:01.374413967 CEST	61014	53	192.168.2.9	1.1.1.1
Oct 7, 2024 00:54:01.843436956 CEST	53	55335	1.1.1.1	192.168.2.9
Oct 7, 2024 00:54:01.856031895 CEST	53	61014	1.1.1.1	192.168.2.9
Oct 7, 2024 00:54:13.004503012 CEST	53	51959	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 7, 2024 00:53:58.627799988 CEST	192.168.2.9	1.1.1.1	c29c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 00:53:56.061844110 CEST	192.168.2.9	1.1.1.1	0x7556	Standard query (0)	coworkingspacecity.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:56.062378883 CEST	192.168.2.9	1.1.1.1	0x1c1d	Standard query (0)	coworkingspacecity.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.056900978 CEST	192.168.2.9	1.1.1.1	0x6bcb	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.057041883 CEST	192.168.2.9	1.1.1.1	0x45ab	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.058882952 CEST	192.168.2.9	1.1.1.1	0x13b7	Standard query (0)	dalb.valuecommerce.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.059017897 CEST	192.168.2.9	1.1.1.1	0x9a22	Standard query (0)	dalb.valuecommerce.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.082973957 CEST	192.168.2.9	1.1.1.1	0xbf5d	Standard query (0)	dalc.valuecommerce.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.083147049 CEST	192.168.2.9	1.1.1.1	0x7c0c	Standard query (0)	dalc.valuecommerce.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.537755013 CEST	192.168.2.9	1.1.1.1	0xea6b	Standard query (0)	aml.valuecommerce.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.538147926 CEST	192.168.2.9	1.1.1.1	0x267f	Standard query (0)	aml.valuecommerce.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.539602995 CEST	192.168.2.9	1.1.1.1	0x217d	Standard query (0)	i.moshimo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.540272951 CEST	192.168.2.9	1.1.1.1	0x85a6	Standard query (0)	i.moshimo.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.560997963 CEST	192.168.2.9	1.1.1.1	0xcc1d	Standard query (0)	m.media-amazon.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.561141968 CEST	192.168.2.9	1.1.1.1	0xce43	Standard query (0)	m.media-amazon.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.576672077 CEST	192.168.2.9	1.1.1.1	0x65da	Standard query (0)	completion.amazon.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.576833963 CEST	192.168.2.9	1.1.1.1	0x4bfe	Standard query (0)	completion.amazon.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.591037035 CEST	192.168.2.9	1.1.1.1	0x629a	Standard query (0)	images-fe.ssl-images-amazon.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.591691017 CEST	192.168.2.9	1.1.1.1	0xaca7	Standard query (0)	images-fe.ssl-images-amazon.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.611212969 CEST	192.168.2.9	1.1.1.1	0x54a	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.611706018 CEST	192.168.2.9	1.1.1.1	0xa2d3	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.649439096 CEST	192.168.2.9	1.1.1.1	0xb23f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.650001049 CEST	192.168.2.9	1.1.1.1	0xa425	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.660224915 CEST	192.168.2.9	1.1.1.1	0x245d	Standard query (0)	cdn.syndication.twimg.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.660696983 CEST	192.168.2.9	1.1.1.1	0x7002	Standard query (0)	cdn.syndication.twimg.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.876409054 CEST	192.168.2.9	1.1.1.1	0x19ca	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.876804113 CEST	192.168.2.9	1.1.1.1	0xeb9a	Standard query (0)	secure.gravatar.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.888039112 CEST	192.168.2.9	1.1.1.1	0xf352	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.888534069 CEST	192.168.2.9	1.1.1.1	0xcef6	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.923155069 CEST	192.168.2.9	1.1.1.1	0x917f	Standard query (0)	cse.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.923537016 CEST	192.168.2.9	1.1.1.1	0x38fa	Standard query (0)	cse.google.com	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.971321106 CEST	192.168.2.9	1.1.1.1	0x11e3	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.971679926 CEST	192.168.2.9	1.1.1.1	0x61cd	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 00:53:58.995167971 CEST	192.168.2.9	1.1.1.1	0xa5de	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.995698929 CEST	192.168.2.9	1.1.1.1	0xf2cb	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 00:53:59.806879044 CEST	192.168.2.9	1.1.1.1	0xb9c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:59.806879044 CEST	192.168.2.9	1.1.1.1	0x2c5a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 00:54:01.374056101 CEST	192.168.2.9	1.1.1.1	0x86e3	Standard query (0)	coworkingspacecity.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:54:01.374413967 CEST	192.168.2.9	1.1.1.1	0xac17	Standard query (0)	coworkingspacecity.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 00:53:45.087542057 CEST	1.1.1.1	192.168.2.9	0x37f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:45.087542057 CEST	1.1.1.1	192.168.2.9	0x37f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:56.489758015 CEST	1.1.1.1	192.168.2.9	0x7556	No error (0)	coworkingspacecity.com		118.27.95.26	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.065104961 CEST	1.1.1.1	192.168.2.9	0x6bcb	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.065104961 CEST	1.1.1.1	192.168.2.9	0x6bcb	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.065385103 CEST	1.1.1.1	192.168.2.9	0x45ab	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 00:53:58.089235067 CEST	1.1.1.1	192.168.2.9	0x13b7	No error (0)	dalb.valuecommerce.com	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.089235067 CEST	1.1.1.1	192.168.2.9	0x13b7	No error (0)	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		35.74.37.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.089235067 CEST	1.1.1.1	192.168.2.9	0x13b7	No error (0)	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		18.177.127.215	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.089235067 CEST	1.1.1.1	192.168.2.9	0x13b7	No error (0)	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		54.150.214.28	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.110944986 CEST	1.1.1.1	192.168.2.9	0x9a22	No error (0)	dalb.valuecommerce.com	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.111002922 CEST	1.1.1.1	192.168.2.9	0xbf5d	No error (0)	dalc.valuecommerce.com	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.111002922 CEST	1.1.1.1	192.168.2.9	0xbf5d	No error (0)	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		35.74.37.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.111002922 CEST	1.1.1.1	192.168.2.9	0xbf5d	No error (0)	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		18.177.127.215	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.111002922 CEST	1.1.1.1	192.168.2.9	0xbf5d	No error (0)	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		54.150.214.28	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.128213882 CEST	1.1.1.1	192.168.2.9	0x7c0c	No error (0)	dalc.valuecommerce.com	ad-dal-prd-1056964492.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.547703028 CEST	1.1.1.1	192.168.2.9	0x267f	No error (0)	aml.valuecommerce.com	daxym8vtpycty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.556655884 CEST	1.1.1.1	192.168.2.9	0xea6b	No error (0)	aml.valuecommerce.com	daxym8vtpycty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.556655884 CEST	1.1.1.1	192.168.2.9	0xea6b	No error (0)	daxym8vtpycty.cloudfront.net		13.35.58.10	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.556655884 CEST	1.1.1.1	192.168.2.9	0xea6b	No error (0)	daxym8vtpycty.cloudfront.net		13.35.58.86	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.556655884 CEST	1.1.1.1	192.168.2.9	0xea6b	No error (0)	daxym8vtpycty.cloudfront.net		13.35.58.7	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.556655884 CEST	1.1.1.1	192.168.2.9	0xea6b	No error (0)	daxym8vtpycty.cloudfront.net		13.35.58.65	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.567641973 CEST	1.1.1.1	192.168.2.9	0xcc1d	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.567641973 CEST	1.1.1.1	192.168.2.9	0xcc1d	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.567641973 CEST	1.1.1.1	192.168.2.9	0xcc1d	No error (0)	c.media-amazon.com		3.161.81.160	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.567739964 CEST	1.1.1.1	192.168.2.9	0xce43	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.567739964 CEST	1.1.1.1	192.168.2.9	0xce43	No error (0)	tp.c47710ee9-frontier.media-amazon.com	a.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.567739964 CEST	1.1.1.1	192.168.2.9	0xce43	No error (0)	a.media-amazon.com	a.media-amazon.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.583472013 CEST	1.1.1.1	192.168.2.9	0x65da	No error (0)	completion.amazon.com		44.215.138.240	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.597810984 CEST	1.1.1.1	192.168.2.9	0x629a	No error (0)	images-fe.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.597810984 CEST	1.1.1.1	192.168.2.9	0x629a	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.597810984 CEST	1.1.1.1	192.168.2.9	0x629a	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.597810984 CEST	1.1.1.1	192.168.2.9	0x629a	No error (0)	c.media-amazon.com		18.239.85.223	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.617609024 CEST	1.1.1.1	192.168.2.9	0x54a	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.618432045 CEST	1.1.1.1	192.168.2.9	0xa2d3	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.627708912 CEST	1.1.1.1	192.168.2.9	0xaca7	No error (0)	images-fe.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.627708912 CEST	1.1.1.1	192.168.2.9	0xaca7	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.627708912 CEST	1.1.1.1	192.168.2.9	0xaca7	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.656302929 CEST	1.1.1.1	192.168.2.9	0xb23f	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.656522036 CEST	1.1.1.1	192.168.2.9	0xa425	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 00:53:58.670603037 CEST	1.1.1.1	192.168.2.9	0x7002	No error (0)	cdn.syndication.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.804326057 CEST	1.1.1.1	192.168.2.9	0x217d	No error (0)	i.moshimo.com	site-113401565138.gslb11.sakura.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.804326057 CEST	1.1.1.1	192.168.2.9	0x217d	No error (0)	site-113401565138.gslb11.sakura.ne.jp		133.125.20.8	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.804326057 CEST	1.1.1.1	192.168.2.9	0x217d	No error (0)	site-113401565138.gslb11.sakura.ne.jp		133.125.20.6	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.882982016 CEST	1.1.1.1	192.168.2.9	0x19ca	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.894871950 CEST	1.1.1.1	192.168.2.9	0xf352	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.894871950 CEST	1.1.1.1	192.168.2.9	0xf352	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.894871950 CEST	1.1.1.1	192.168.2.9	0xf352	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.894871950 CEST	1.1.1.1	192.168.2.9	0xf352	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.894871950 CEST	1.1.1.1	192.168.2.9	0xf352	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.894871950 CEST	1.1.1.1	192.168.2.9	0xf352	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.895165920 CEST	1.1.1.1	192.168.2.9	0xcef6	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.895165920 CEST	1.1.1.1	192.168.2.9	0xcef6	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:58.929708004 CEST	1.1.1.1	192.168.2.9	0x917f	No error (0)	cse.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.978076935 CEST	1.1.1.1	192.168.2.9	0x11e3	No error (0)	ad.doubleclick.net		142.250.185.198	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:58.978302002 CEST	1.1.1.1	192.168.2.9	0x61cd	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 7, 2024 00:53:59.001997948 CEST	1.1.1.1	192.168.2.9	0xa5de	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:59.002271891 CEST	1.1.1.1	192.168.2.9	0xf2cb	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 7, 2024 00:53:59.034117937 CEST	1.1.1.1	192.168.2.9	0x85a6	No error (0)	i.moshimo.com	site-113401565138.gslb11.sakura.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:59.138345003 CEST	1.1.1.1	192.168.2.9	0xdc77	No error (0)	cdn.syndication.twimg.com	twimg.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:53:59.138345003 CEST	1.1.1.1	192.168.2.9	0xdc77	No error (0)	twimg.twitter.map.fastly.net		151.101.44.159	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:59.813488007 CEST	1.1.1.1	192.168.2.9	0x2c5a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 00:53:59.813499928 CEST	1.1.1.1	192.168.2.9	0xb9c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:53:59.813499928 CEST	1.1.1.1	192.168.2.9	0xb9c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:54:01.843436956 CEST	1.1.1.1	192.168.2.9	0x86e3	No error (0)	coworkingspacecity.com		118.27.95.26	A (IP address)	IN (0x0001)	false
Oct 7, 2024 00:54:05.931818008 CEST	1.1.1.1	192.168.2.9	0xfc9d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 00:54:05.931818008 CEST	1.1.1.1	192.168.2.9	0xfc9d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

coworkingspacecity.com

https:

cdnjs.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:45 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:45 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:45 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225345Z-1657d5bbd48qjg85buwfdynm5w00000002pg00000000namy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:45 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 22:53:45 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 22:53:45 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 22:53:46 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:46 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:46 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225346Z-1657d5bbd48xsz2nuzq4vfrzg800000002g000000000dgya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:46 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:46 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:46 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225346Z-1657d5bbd48sdh4cyzadbb374800000002h0000000006x12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:46 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:46 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:46 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225346Z-1657d5bbd487nf59mzf5b3gk8n000000025000000000tfu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:46 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:46 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225346Z-1657d5bbd48sqtlf1huhzuwq70000000029g00000000pxup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:46 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:46 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225346Z-1657d5bbd48f7nlxc7n5fnfzh0000000027000000000mqak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:47 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225347Z-1657d5bbd48tnj6wmberkg2xy800000002n000000000sypn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:47 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225347Z-1657d5bbd48gqrfwecymhhbfm800000001g000000000874w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:47 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225347Z-1657d5bbd48xsz2nuzq4vfrzg800000002kg0000000035rp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:47 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:47 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225347Z-1657d5bbd48vlsxxpe15ac3q7n00000002k000000000hewk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:47 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:47 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225347Z-1657d5bbd487nf59mzf5b3gk8n00000002b00000000049y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:47 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:50 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225350Z-1657d5bbd48p2j6x2quer0q02800000002w0000000007wxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:50 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225350Z-1657d5bbd48xdq5dkwwugdpzr000000002vg00000000uawp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:50 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225350Z-1657d5bbd48brl8we3nu8cxwgn00000002yg00000000cyeg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:50 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225350Z-1657d5bbd48lknvp09v995n790000000026000000000seyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:50 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225350Z-1657d5bbd487nf59mzf5b3gk8n00000002ag000000005gpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.9	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:52 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225352Z-1657d5bbd48762wn1qw4s5sd3000000002m00000000015st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:53 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:52 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225353Z-1657d5bbd48cpbzgkvtewk0wu000000002mg00000000uwrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:52 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225352Z-1657d5bbd48dfrdj7px744zp8s00000002f0000000003468 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:53 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225353Z-1657d5bbd48wd55zet5pcra0cg00000002p0000000006qsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:53 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225353Z-1657d5bbd48xlwdx82gahegw4000000002tg00000000hxdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.9	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:54 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:54 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225354Z-1657d5bbd482lxwq1dp2t1zwkc00000002d000000000a3rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:54 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.9	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:54 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225354Z-1657d5bbd487nf59mzf5b3gk8n00000002a0000000007stf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.9	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:54 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225354Z-1657d5bbd48vlsxxpe15ac3q7n00000002ng000000008ady x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:54 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225354Z-1657d5bbd48wd55zet5pcra0cg00000002gg00000000rqvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:54 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225354Z-1657d5bbd48tnj6wmberkg2xy800000002t00000000052z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:55 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:55 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225355Z-1657d5bbd48dfrdj7px744zp8s00000002b000000000k00t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:55 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.9	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:55 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225355Z-1657d5bbd48sdh4cyzadbb374800000002cg00000000qzp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.9	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:55 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225355Z-1657d5bbd48sdh4cyzadbb374800000002bg00000000ugfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.9	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:55 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:55 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225355Z-1657d5bbd48xlwdx82gahegw4000000002ug00000000dqqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:55 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:55 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:55 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225355Z-1657d5bbd48762wn1qw4s5sd3000000002d000000000u3e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:55 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.9	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:56 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:56 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225356Z-1657d5bbd48t66tjar5xuq22r800000002g000000000tn4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:56 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:56 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225356Z-1657d5bbd48vlsxxpe15ac3q7n00000002qg0000000011nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.9	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:56 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225356Z-1657d5bbd48wd55zet5pcra0cg00000002n000000000a6sh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:56 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:56 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225356Z-1657d5bbd48xdq5dkwwugdpzr000000002x000000000kvvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:56 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.9	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:56 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225356Z-1657d5bbd48sdh4cyzadbb374800000002eg00000000ezrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225357Z-1657d5bbd48t66tjar5xuq22r800000002fg00000000vwvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:57 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.9	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225357Z-1657d5bbd48sqtlf1huhzuwq7000000002e000000000494y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:57 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225357Z-1657d5bbd487nf59mzf5b3gk8n00000002b0000000004akf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225357Z-1657d5bbd48gqrfwecymhhbfm800000001bg00000000tsdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:57 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.9	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225357Z-1657d5bbd48vhs7r2p1ky7cs5w000000030g000000004ebg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:57 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49749	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	665	OUT	GET / HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:57 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Link: <https://coworkingspacecity.com/wp-json/>; rel="https://api.w.org/" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT
2024-10-06 22:53:57 UTC	16065	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 Data Ascii: 8000<!doctype html><html lang="ja"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover"><meta name="referrer" content="no-referrer-when-downgrade"><meta name="format-detection" cont
2024-10-06 22:53:57 UTC	16384	IN	Data Raw: 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 64 65 65 70 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 69 6e 64 69 67 6f 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: var(--wp--preset--color--deep) !important;}.has-indigo-background-color{background-color: var(--wp--preset--color--indigo) !important;}.has-blue-background-color{background-color: var(--wp--preset--color--blue) !important;}.has-light-blue-background-color
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 6f 75 6e 64 2d 64 69 6d 2c 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 68 72 2e 69 73 2d 73 74 79 6c 65 2d 63 75 74 2d 6c 69 6e 65 3a 3a 61 66 74 65 72 2c 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 69 63 6f 6e 6c 69 73 74 2d 74 69 74 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 63 36 62 63 30 7d 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 63 6f 6c 6f 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f Data Ascii: ound-dim,.has-indigo-background-color hr.is-style-cut-line::after,.has-indigo-background-color .iconlist-title{background-color:#5c6bc0}.is-style-outline .wp-block-button__link.has-indigo-color,.wp-block-button__link.is-style-outline.has-indigo-color{colo
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 2d 62 61 6c 6c 6f 6f 6e 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 68 61 73 2d 63 6f 63 6f 6f 6e 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 73 62 73 2d 73 74 6e 2e 73 62 70 2d 72 20 2e 73 70 65 65 63 68 2d 62 61 6c 6c 6f 6f 6e 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 68 61 73 2d 63 6f 63 6f 6f 6e 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 72 65 63 65 6e 74 2d 63 6f 6d 6d 65 6e 74 2d 63 6f 6e 74 65 6e 74 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 68 61 73 2d 63 6f 63 6f 6f 6e 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: -balloon::after{border-right-color:#fff}.has-cocoon-white-background-color .sbs-stn.sbp-r .speech-balloon::after{border-left-color:#fff}.has-cocoon-white-background-color .recent-comment-content::after{border-bottom-color:#fff}.has-cocoon-white-background
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 79 20 2e 61 75 74 68 6f 72 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 62 6c 6f 67 63 61 72 64 2d 77 72 61 70 2c 2e 62 6f 64 79 20 2e 6c 6f 67 69 6e 2d 75 73 65 72 2d 6f 6e 6c 79 2c 2e 62 6f 64 79 20 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 71 75 65 73 74 69 6f 6e 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 61 6c 65 72 74 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 2e 62 6f 64 79 20 2e 71 75 65 73 74 69 6f 6e 2c 2e 62 6f 64 79 20 2e 61 6c 65 72 74 2c 2e 62 6f 64 79 20 2e 6d 65 6d 6f 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 63 6f 6d 6d 6f 6e 2d 69 63 6f 6e 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 62 6c 61 6e 6b 2d 62 6f 78 2c 2e 62 6f 64 79 20 2e 62 75 74 74 6f 6e 2d Data Ascii: y .author-box,.body .blogcard-wrap,.body .login-user-only,.body .information-box,.body .question-box,.body .alert-box,.body .information,.body .question,.body .alert,.body .memo-box,.body .comment-box,.body .common-icon-box,.body .blank-box,.body .button-
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 63 6f 6c 6f 72 3a 23 66 34 38 66 62 31 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 73 70 65 65 63 68 2d 77 72 61 70 2e 73 62 70 2d 6c 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 73 70 65 65 63 68 2d 62 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 34 38 66 62 31 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 73 70 65 65 63 68 2d 77 72 61 70 2e 73 62 70 2d 72 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 73 70 65 65 63 68 2d 62 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f Data Ascii: color:#f48fb1}html .body .speech-wrap.sbp-l:not(.not-nested-style) .speech-balloon.has-pink-border-color::before{border-right-color:#f48fb1}html .body .speech-wrap.sbp-r:not(.not-nested-style) .speech-balloon.has-pink-border-color::before{border-left-colo
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 6c 6f 72 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 63 36 62 63 30 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 73 70 65 65 63 68 2d 77 72 61 70 2e 73 62 73 2d 74 68 69 6e 6b 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 73 70 65 65 63 68 2d 62 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 3a 62 65 66 6f 72 65 2c 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 73 70 65 65 63 68 2d 77 72 61 70 2e 73 62 73 2d 74 68 69 6e 6b 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 73 70 65 65 63 68 2d 62 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 69 6e 64 69 67 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 Data Ascii: lor::after{border-color:#5c6bc0}html .body .speech-wrap.sbs-think:not(.not-nested-style) .speech-balloon.has-indigo-background-color::before,html .body .speech-wrap.sbs-think:not(.not-nested-style) .speech-balloon.has-indigo-background-color::after{backgr
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 31 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 68 61 73 2d 63 79 61 6e 2d 61 6e 73 77 65 72 2d 63 6f 6c 6f 72 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 66 61 71 2d 61 6e 73 77 65 72 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 30 30 61 63 63 31 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 69 73 2d 73 74 79 6c 65 2d 73 71 75 61 72 65 2e 68 61 73 2d 63 79 61 6e 2d 71 75 65 73 74 69 6f 6e 2d 63 6f 6c 6f 72 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 66 61 71 2d 71 75 65 73 74 69 6f 6e 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 61 63 63 31 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 69 73 2d 73 74 79 6c 65 2d 73 71 75 61 72 65 2e 68 61 73 2d 63 Data Ascii: 1}html .body .has-cyan-answer-color:not(.not-nested-style) .faq-answer-label{color:#00acc1}html .body .is-style-square.has-cyan-question-color:not(.not-nested-style) .faq-question-label{color:#fff;background-color:#00acc1}html .body .is-style-square.has-c
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 62 62 2d 6c 61 62 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 30 63 61 33 33 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 74 6f 67 67 6c 65 2d 77 72 61 70 2e 68 61 73 2d 6c 69 6d 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 30 63 61 33 33 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 74 6f 67 67 6c 65 2d 77 72 61 70 2e 68 61 73 2d 6c 69 6d 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 6e 6f 74 28 2e 6e 6f 74 2d 6e 65 73 74 65 64 2d 73 74 79 6c 65 29 20 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 74 6f 67 67 6c 65 2d 77 72 61 70 2e 68 61 73 2d Data Ascii: bb-label{background-color:#c0ca33}html .body .toggle-wrap.has-lime-border-color:not(.not-nested-style) .toggle-button{background-color:#c0ca33}html .body .toggle-wrap.has-lime-border-color:not(.not-nested-style) .toggle-button,html .body .toggle-wrap.has-
2024-10-06 22:53:58 UTC	16384	IN	Data Raw: 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 6d 69 63 72 6f 2d 62 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 61 37 32 36 7d 68 74 6d 6c 20 2e 62 6f 64 79 20 2e 6d 69 63 72 6f 2d 62 61 6c 6c 6f 6f 6e 2e 68 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2e 68 61 73 2d 6f 72 61 6e 67 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: alloon.has-orange-background-color::before{border-top-color:transparent;border-bottom-color:transparent}html .body .micro-balloon.has-orange-background-color::after{border-top-color:#ffa726}html .body .micro-balloon.has-border-color.has-orange-border-colo

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.9	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:58 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225358Z-1657d5bbd48sdh4cyzadbb374800000002b000000000wxhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:58 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.9	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:58 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225358Z-1657d5bbd487nf59mzf5b3gk8n000000029g000000009b44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:58 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.9	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:58 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225358Z-1657d5bbd48xsz2nuzq4vfrzg800000002kg00000000367f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:58 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.9	49750	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	641	OUT	GET /wp-content/themes/cocoon-master/webfonts/icomoon/fonts/icomoon.woff?v=2.7.0.2 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://coworkingspacecity.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:58 UTC	332	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:58 GMT Content-Type: application/font-woff Content-Length: 18552 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "4878-6236534020cdc" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:53:58 UTC	16052	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 48 78 00 0c 00 00 00 00 48 28 00 01 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 1c 00 00 02 38 00 00 02 38 eb d1 f0 0b 4f 53 2f 32 00 00 03 54 00 00 00 60 00 00 00 60 0f 12 08 0f 63 6d 61 70 00 00 03 b4 00 00 00 fc 00 00 00 fc 6b 82 82 f7 67 61 73 70 00 00 04 b0 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 04 b8 00 00 3d 20 00 00 3d 20 d5 c3 df fb 68 65 61 64 00 00 41 d8 00 00 00 36 00 00 00 36 27 40 99 dc 68 68 65 61 00 00 42 10 00 00 00 24 00 00 00 24 08 0f 04 73 68 6d 74 78 00 00 42 34 00 00 01 98 00 00 01 98 16 d6 ff ce 6c 6f 63 61 00 00 43 cc 00 00 00 ce 00 00 00 ce 32 2e 23 cc 6d 61 78 70 00 00 44 9c 00 00 00 20 00 00 00 20 00 72 01 19 6e 61 6d 65 00 00 44 bc 00 00 03 Data Ascii: wOFFHxH(GSUB88OS/2T``cmapkgaspglyf= = headA66'@hheaB$$shmtxB4locaC2.#maxpD rnameD
2024-10-06 22:53:58 UTC	2500	IN	Data Raw: 56 4b 4b 71 20 21 16 15 4b 34 34 3d 10 0d 01 56 35 0e 20 1c 1f 1f 20 1c 4b 11 03 0f 09 45 78 17 14 03 0a 11 36 3b 19 35 1a 1a 35 19 3b 36 11 09 04 14 17 78 45 0b 11 0c 10 3e 33 34 4b 16 15 21 20 71 4b 4b 56 03 53 20 21 70 4b 4c 55 45 3e 3e 67 26 26 15 03 0f 08 08 2b 1a 13 44 24 19 13 06 02 29 2f 05 08 14 1b 08 08 4e 76 22 38 15 08 3b 2b 02 29 07 07 07 07 29 02 2b 3b 08 15 38 22 77 4d 08 09 26 1d 2a 3e 0a 08 0f 03 15 26 26 67 3e 3e 45 55 4c 4b 70 21 20 00 05 00 00 ff c0 04 00 03 c0 00 21 00 27 00 2d 00 33 00 39 00 00 01 22 06 07 26 27 2e 01 27 26 23 22 06 07 0e 01 15 11 14 16 17 30 33 3a 01 33 32 33 32 36 35 34 26 23 05 33 37 27 23 07 07 23 27 37 33 17 07 33 37 27 23 07 07 33 37 27 23 07 03 7c 0e 19 0c 04 14 13 3f 28 28 2e 16 2b 13 08 05 08 06 39 39 89 39 Data Ascii: VKKq !K44=V5 KEx6;55;6xE>34K! qKKVS !pKLUE>>g&&+D$)/Nv"8;+))+;8"wM&*>&&g>>EULKp! !'-39"&'.'&#"03:3232654&#37'##'7337'#37'#\|?((.+999

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:57 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:57 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225357Z-1657d5bbd48sqtlf1huhzuwq7000000002d0000000007mut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:58 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:58 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:58 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225358Z-1657d5bbd48f7nlxc7n5fnfzh0000000025000000000xw3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.9	49763	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:58 UTC	621	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2&fver=20241001075830 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:59 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/css Content-Length: 112427 Connection: close Last-Modified: Tue, 01 Oct 2024 07:58:30 GMT ETag: "1b72b-62365aff18d34" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	16063	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d Data Ascii: ient):before{opacity:.8}.wp-block-cover-image.has-background-dim.has-background-dim-90 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 20 66 69 67 75 72 65 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d Data Ascii: -gallery:not(.has-nested-images) .blocks-gallery-image:nth-of-type(2n),.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item:nth-of-type(2n){margin-right:0}.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-image figure,.blocks-gallery-
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 67 68 74 3e 66 69 67 63 61 70 74 69 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 61 6c 69 67 6e 63 65 6e 74 65 72 3e 66 69 67 63 61 70 74 69 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 61 6c 69 67 6e 6c 65 66 74 3e 66 69 67 63 61 70 74 69 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 61 6c 69 67 6e 72 69 67 68 74 3e 66 69 67 63 61 70 74 69 6f 6e 7b 63 61 70 74 69 6f 6e 2d 73 69 64 65 3a 62 6f 74 74 6f 6d 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 61 70 74 69 6f 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 31 65 6d 20 2e 35 65 6d 20 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 2e 61 6c 69 67 6e 72 Data Ascii: ght>figcaption,.wp-block-image.aligncenter>figcaption,.wp-block-image.alignleft>figcaption,.wp-block-image.alignright>figcaption{caption-side:bottom;display:table-caption}.wp-block-image .alignleft{float:left;margin:.5em 1em .5em 0}.wp-block-image .alignr
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 70 6f 69 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 2e 6f 70 65 6e 2d 6f 6e 2d 63 6c 69 63 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 38 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 2e 6f 70 65 6e 2d 6f 6e 2d 63 6c 69 63 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 2b 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 65 6d 3b 70 6f 69 6e 74 Data Ascii: pointer}.wp-block-navigation-item.open-on-click .wp-block-navigation-submenu__toggle{padding-left:0;padding-right:.85em}.wp-block-navigation-item.open-on-click .wp-block-navigation-submenu__toggle+.wp-block-navigation__submenu-icon{margin-left:-.6em;point
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 30 7b 6f 70 61 63 69 74 79 3a 2e 36 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 7b 6f 70 61 63 69 74 79 3a 2e 37 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 Data Ascii: wp-block-post-featured-image .wp-block-post-featured-image__overlay.has-background-dim-60{opacity:.6}.wp-block-post-featured-image .wp-block-post-featured-image__overlay.has-background-dim-70{opacity:.7}.wp-block-post-featured-image .wp-block-post-feature
2024-10-06 22:53:59 UTC	14444	IN	Data Raw: 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 74 75 6d 62 6c 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 31 31 38 33 35 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 74 77 69 74 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 34 34 30 61 34 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d Data Ascii: where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-tumblr{background-color:#011835;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-twitch{background-color:#6440a4;color:#fff}:where(.wp-block-social-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.9	49764	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:58 UTC	614	OUT	GET /wp-content/themes/cocoon-master/style.css?ver=6.6.2&fver=20241001072351 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:59 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/css Content-Length: 257886 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "3ef5e-6236534006eca" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	16063	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 43 6f 63 6f 6f 6e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 53 45 4f e3 83 bb e9 ab 98 e9 80 9f e5 8c 96 e3 83 bb e3 83 a2 e3 83 90 e3 82 a4 e3 83 ab e3 83 95 e3 82 a1 e3 83 bc e3 82 b9 e3 83 88 e6 9c 80 e9 81 a9 e5 8c 96 e6 b8 88 e3 81 bf e3 81 ae e7 84 a1 e6 96 99 e3 83 86 e3 83 bc e3 83 9e e3 80 82 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 77 70 2d 63 6f 63 6f 6f 6e 2e 63 6f 6d 2f 0a 41 75 74 68 6f 72 3a 20 e3 82 8f e3 81 84 e3 81 b2 e3 82 89 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 6e 65 6c 6f 67 2e 6a 70 2f 0a 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 6f 63 6f 6f 6e 0a 56 65 72 73 69 6f 6e 3a 20 32 2e 37 2e 37 2e Data Ascii: @charset "UTF-8";/*Theme Name: CocoonDescription: SEOTheme URI: https://wp-cocoon.com/Author: Author URI: https://nelog.jp/Text Domain: cocoonVersion: 2.7.7.
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 63 61 72 64 73 20 2e 77 69 64 67 65 74 2d 65 6e 74 72 79 2d 63 61 72 64 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6e 6f 2d 74 68 75 6d 62 6e 61 69 6c 20 2e 72 65 63 74 2d 6d 69 6e 69 2d 63 61 72 64 20 2e 72 65 6c 61 74 65 64 2d 65 6e 74 72 79 2d 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6e 6f 2d 74 68 75 6d 62 6e 61 69 6c 20 2e 77 69 64 67 65 74 2d 65 6e 74 72 79 2d 63 61 72 64 73 20 64 69 76 2e 77 69 64 67 65 74 2d 65 6e 74 72 79 2d 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 2e 36 65 6d 3b 0a 7d 0a 2e 6e 6f 2d 74 68 75 6d 62 6e 61 69 6c 20 2e 77 69 64 67 65 74 2d 65 6e 74 72 79 2d 63 61 72 64 73 2e 6c Data Ascii: cards .widget-entry-card-content,.no-thumbnail .rect-mini-card .related-entry-card-content { margin: 0;}.no-thumbnail .widget-entry-cards div.widget-entry-card-content { font-size: 18px; margin-bottom: 0.6em;}.no-thumbnail .widget-entry-cards.l
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 2d 73 68 61 72 65 2e 73 73 2d 63 6f 6c 2d 34 20 61 20 7b 0a 20 20 77 69 64 74 68 3a 20 32 34 25 3b 0a 7d 0a 2e 73 6e 73 2d 73 68 61 72 65 2e 73 73 2d 63 6f 6c 2d 35 20 2e 73 6e 73 2d 62 75 74 74 6f 6e 73 20 7b 0a 20 20 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 31 2e 32 35 25 3b 0a 7d 0a 2e 73 6e 73 2d 73 68 61 72 65 2e 73 73 2d 63 6f 6c 2d 35 20 61 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 39 25 3b 0a 7d 0a 2e 73 6e 73 2d 73 68 61 72 65 2e 73 73 2d 63 6f 6c 2d 36 20 2e 73 6e 73 2d 62 75 74 74 6f 6e 73 20 7b 0a 20 20 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 30 2e 38 25 3b 0a 7d 0a 2e 73 6e 73 2d 73 68 61 72 65 2e 73 73 2d 63 6f 6c 2d 36 20 61 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 36 25 3b 0a 7d 0a 2e 73 6e 73 2d 73 68 61 72 65 2e 73 73 2d 68 69 67 68 2d 61 6e 64 2d 6c Data Ascii: -share.ss-col-4 a { width: 24%;}.sns-share.ss-col-5 .sns-buttons { column-gap: 1.25%;}.sns-share.ss-col-5 a { width: 19%;}.sns-share.ss-col-6 .sns-buttons { column-gap: 0.8%;}.sns-share.ss-col-6 a { width: 16%;}.sns-share.ss-high-and-l
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 0a 2e 62 6c 6f 67 63 61 72 64 2d 74 68 75 6d 62 6e 61 69 6c 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 62 6c 6f 67 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 37 30 70 78 3b 0a 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 34 30 70 78 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 62 6c 6f 67 63 61 72 64 2d 74 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 2e 34 65 6d 3b 0a 7d 0a 0a 2e 62 6c 6f 67 63 61 72 64 2d 73 6e 69 70 70 65 74 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 65 Data Ascii: .blogcard-thumbnail img { width: 100%;}.blogcard-content { margin-left: 170px; max-height: 140px; min-height: 100px; overflow: hidden;}.blogcard-title { font-weight: bold; margin-bottom: 0.4em;}.blogcard-snippet { font-size: 0.8e
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 7d 0a 0a 2f 2a e6 89 93 e3 81 a1 e6 b6 88 e3 81 97 e7 b7 9a 2a 2f 0a 2e 73 74 72 69 6b 65 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c 69 6e 65 2d 74 68 72 6f 75 67 68 3b 0a 7d 0a 0a 2f 2a e3 82 ad e3 83 bc e3 83 9c e3 83 bc e3 83 89 e3 82 ad e3 83 bc e3 81 ae e3 82 b9 e3 82 bf e3 82 a4 e3 83 ab 2a 2f 0a 2e 6b 65 79 62 6f 61 72 64 2d 6b 65 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 63 65 6e 74 65 72 20 74 6f 70 2c 20 23 65 65 65 2c 20 23 66 39 66 39 66 39 2c 20 23 65 65 65 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d Data Ascii: }//.strike { text-decoration: line-through;}//.keyboard-key { background-color: #f9f9f9; background-image: -moz-linear-gradient(center top, #eee, #f9f9f9, #eee); border: 1px solid var(-
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 30 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 31 2e 35 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 70 78 3b 0a 7d 0a 0a 2e 6d 65 64 69 61 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 61 72 63 68 2d 66 6f 72 6d 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 62 74 6e 2d 77 72 61 Data Ascii: 00; position: absolute; bottom: -1.5em; font-size: 25px;}.media-modal-content .search-form { margin: 0 !important; display: block !important; box-shadow: none !important; border-radius: 0 !important; border: none !important;}.btn-wra
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6d 69 63 72 6f 2d 62 61 6c 6c 6f 6f 6e 2e 6d 63 2d 64 65 65 70 3a 3a 61 66 74 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 64 65 65 70 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 2e 6d 69 63 72 6f 2d 62 61 6c 6c 6f 6f 6e 2e 6d 63 2d 69 6e 64 69 67 6f 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 69 6e 64 69 67 6f 2d 63 6f 6c 6f 72 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d Data Ascii: sparent; border-bottom-color: transparent;}.micro-balloon.mc-deep::after { border-top-color: var(--cocoon-deep-color);}.micro-balloon.mc-indigo { background-color: var(--cocoon-indigo-color); color: var(--cocoon-white-color); border: none;}
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 2e 74 63 62 2d 64 65 65 70 2d 6f 72 61 6e 67 65 20 2e 74 61 62 2d 63 61 70 74 69 6f 6e 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 0a 2e 74 63 62 2d 77 68 69 74 65 20 2e 74 61 62 2d 63 61 70 74 69 6f 6e 2d 62 6f 78 2d 6c 61 62 65 6c 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 63 6f 6f 6e 2d 77 68 69 74 65 2d 63 6f Data Ascii: und-color: var(--cocoon-deep-orange-color); color: var(--cocoon-white-color);}.tcb-deep-orange .tab-caption-box-content { border-color: var(--cocoon-deep-orange-color);}.tcb-white .tab-caption-box-label { background-color: var(--cocoon-white-co
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 79 3b 0a 7d 0a 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 69 6c 74 65 72 2d 6c 75 64 77 69 67 20 69 6d 67 20 7b 0a 20 20 66 69 6c 74 65 72 3a 20 73 65 70 69 61 28 30 2e 32 35 29 20 63 6f 6e 74 72 61 73 74 28 31 2e 30 35 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 2e 30 35 29 20 73 61 74 75 72 61 74 65 28 32 29 3b 0a 7d 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 69 6c 74 65 72 2d 6c 75 64 77 69 67 20 69 6d 67 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 31 32 35 2c 20 31 30 35 2c 20 32 34 2c 20 30 2e 31 29 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6f 76 65 72 6c 61 79 3b 0a 7d 0a 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 69 6c 74 65 72 2d 61 64 65 6e 20 69 6d 67 20 7b 0a Data Ascii: y;}.is-style-filter-ludwig img { filter: sepia(0.25) contrast(1.05) brightness(1.05) saturate(2);}.is-style-filter-ludwig img::before { background: rgba(125, 105, 24, 0.1); content: ""; mix-blend-mode: overlay;}.is-style-filter-aden img {
2024-10-06 22:53:59 UTC	16384	IN	Data Raw: 30 30 25 3b 0a 7d 0a 2e 63 74 61 2d 6c 65 66 74 2d 61 6e 64 2d 72 69 67 68 74 20 2e 63 74 61 2d 63 6f 6e 74 65 6e 74 20 2e 63 74 61 2d 6d 65 73 73 61 67 65 20 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 63 74 61 2d 72 69 67 68 74 2d 61 6e 64 2d 6c 65 66 74 20 2e 63 74 61 2d 63 6f 6e 74 65 6e 74 20 2e 63 74 61 2d 6d 65 73 73 61 67 65 20 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 7d 0a 0a 2e 63 74 61 2d 72 69 67 68 74 2d 61 6e 64 2d 6c 65 66 74 20 2e 63 74 61 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 3b 0a 7d 0a 0a 2e 63 74 61 2d 74 68 75 6d 62 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d Data Ascii: 00%;}.cta-left-and-right .cta-content .cta-message p:first-child,.cta-right-and-left .cta-content .cta-message p:first-child { margin-top: 0;}.cta-right-and-left .cta-content { flex-direction: row-reverse;}.cta-thumb { text-align: center;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.9	49761	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:58 UTC	618	OUT	GET /wp-content/themes/cocoon-master/keyframes.css?ver=6.6.2&fver=20241001072351 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:59 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/css Content-Length: 291 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "123-6236534006eca" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	291	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 68 69 6e 65 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 20 20 38 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 20 20 7d 0a 20 20 38 31 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 34 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 35 30 29 20 Data Ascii: @keyframes shine { 0% { transform: scale(0) rotate(45deg); opacity: 0; } 80% { transform: scale(0) rotate(45deg); opacity: 0.5; } 81% { transform: scale(4) rotate(45deg); opacity: 1; } 100% { transform: scale(50)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.9	49762	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:58 UTC	650	OUT	GET /wp-content/themes/cocoon-master/webfonts/fontawesome/css/font-awesome.min.css?ver=6.6.2&fver=20241001072351 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:59 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/css Content-Length: 31018 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "792a-623653402050c" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	16065	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-10-06 22:53:59 UTC	14953	IN	Data Raw: 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: "}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:before{content:"\f166"}.fa-youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.9	49773	104.17.25.14	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	588	OUT	GET /ajax/libs/jquery-migrate/3.3.2/jquery-migrate.min.js?ver=3.0.1 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:59 UTC	938	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5fb4701e-2c03" Last-Modified: Wed, 18 Nov 2020 00:51:42 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 136469 Expires: Fri, 26 Sep 2025 22:53:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TLuB8j8HBo64QIM%2F54T8ICh2USAH%2B4ECJ6xHgj%2BzDMKV2aSfklwDfh76h%2BfhCRLB7dO4P%2FG1M9QUYkgSyUaa1ZGc%2BRxwB6akicnn1NoI1Y6%2FEe623rdMVff7UoQJlYgwhW%2FjWQvS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce93b0c891a426a-EWR
2024-10-06 22:53:59 UTC	431	IN	Data Raw: 32 63 30 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 2c03/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 3c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 69 3d 31 3b 69 3c 3d 33 3b 69 2b 2b 29 7b 69 66 28 2b 6f 5b 69 5d 3c 2b 6e 5b 69 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 69 5d 3c 2b 6f 5b 69 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 32 22 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 26 26 65 28 22 33 2e 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 Data Ascii: <=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIG
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 23 22 3d 3d 3d 65 26 26 28 75 28 22 6a 51 75 65 72 79 28 20 27 23 27 20 29 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 22 29 2c 74 5b 30 5d 3d 5b 5d 29 2c 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 73 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 73 2e 66 6e 2c 73 2e 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 Data Ascii: =Array.prototype.slice.call(arguments);return"string"==typeof e&&"#"===e&&(u("jQuery( '#' ) is not a valid selector"),t[0]=[]),l.apply(this,t)},s.fn.init.prototype=s.fn,s.find=function(t){var r=Array.prototype.slice.call(arguments);if("string"==typeof t&&
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 22 6a 51 75 65 72 79 2e 6e 6f 64 65 4e 61 6d 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 69 73 41 72 72 61 79 22 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 22 6a 51 75 65 72 79 2e 69 73 41 72 72 61 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 22 29 29 2c 65 28 22 33 2e 33 2e 30 22 29 26 26 28 6f 28 73 2c 22 69 73 4e 75 6d 65 72 69 63 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 73 65 46 6c Data Ascii: me.toLowerCase()===t.toLowerCase()},"jQuery.nodeName is deprecated"),o(s,"isArray",Array.isArray,"jQuery.isArray is deprecated; use Array.isArray")),e("3.3.0")&&(o(s,"isNumeric",function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-parseFl
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 2c 76 3d 2f 5c 53 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 76 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 6f 6f 6c 65 Data Ascii: n.toggleClass,v=/\S+/g;function j(e){return e.replace(/-([a-z])/g,function(e,t){return t.toUpperCase()})}s.fn.removeAttr=function(e){var r=this;return s.each(e.match(v),function(e,t){s.expr.match.bool.test(t)&&(u("jQuery.fn.removeAttr no longer sets boole
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 29 2c 73 2e 63 73 73 4e 75 6d 62 65 72 7c 7c 28 73 2e 63 73 73 4e 75 6d 62 65 72 3d 7b 7d 29 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 73 2e 66 6e 2e 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 73 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6f 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 6a 28 65 29 2c 6e 3d 72 2c 77 2e 74 65 73 74 28 6e 29 26 26 78 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 Data Ascii: is,arguments)}})),s.cssNumber\|\|(s.cssNumber={}),Q=s.fn.css,s.fn.css=function(e,t){var r,n,o=this;return e&&"object"==typeof e&&!Array.isArray(e)?(s.each(e,function(e,t){s.fn.css.call(o,e,t)}),this):("number"==typeof t&&(r=j(e),n=r,w.test(n)&&x.test(n[0].t
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 43 3d 73 2e 65 76 65 6e 74 2e 66 69 78 3b 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3d 5b 5d 2c 73 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 3d 7b 7d 2c 74 28 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2c 22 63 6f 6e 63 61 74 22 2c 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 2c 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 73 2e 65 76 65 6e 74 2e 66 69 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 74 79 70 65 2c 6e 3d 74 68 69 73 2e 66 69 78 48 6f 6f 6b 73 5b 72 5d 2c 6f 3d 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 75 28 22 6a 51 75 65 72 79 2e 65 76 65 6e Data Ascii: C=s.event.fix;s.event.props=[],s.event.fixHooks={},t(s.event.props,"concat",s.event.props.concat,"jQuery.event.props.concat() is deprecated and removed"),s.event.fix=function(e){var t,r=e.type,n=this.fixHooks[r],o=s.event.props;if(o.length){u("jQuery.even
2024-10-06 22:53:59 UTC	1369	IN	Data Raw: 75 6c 6c 2c 65 2c 74 29 3a 74 68 69 73 2e 74 72 69 67 67 65 72 28 72 29 7d 7d 29 2c 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 6e 2e 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 61 64 79 22 29 7d 29 2c 73 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 72 65 61 64 79 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 26 26 75 28 22 27 72 65 61 64 79 27 20 65 76 65 6e 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 7d 7d 2c 73 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 Data Ascii: ull,e,t):this.trigger(r)}}),s(function(){s(n.document).triggerHandler("ready")}),s.event.special.ready={setup:function(){this===n.document&&u("'ready' event is deprecated")}},s.fn.extend({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated"),thi
2024-10-06 22:53:59 UTC	1261	IN	Data Raw: 65 71 75 69 72 65 73 20 61 20 76 61 6c 69 64 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 22 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 3a 76 6f 69 64 20 30 29 7d 2c 73 2e 61 6a 61 78 26 26 28 44 3d 73 2e 70 61 72 61 6d 2c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 72 26 26 28 75 28 22 6a 51 75 65 72 79 2e 70 61 72 61 6d 28 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 73 20 6a 51 75 65 72 79 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c 6c 28 74 68 Data Ascii: equires a valid DOM element"),arguments.length?this:void 0)},s.ajax&&(D=s.param,s.param=function(e,t){var r=s.ajaxSettings&&s.ajaxSettings.traditional;return void 0===t&&r&&(u("jQuery.param() no longer uses jQuery.ajaxSettings.traditional"),t=r),D.call(th
2024-10-06 22:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.9	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225359Z-1657d5bbd48tnj6wmberkg2xy800000002s0000000008cgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.9	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225359Z-1657d5bbd48brl8we3nu8cxwgn00000002wg00000000mhww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.9	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225359Z-1657d5bbd48762wn1qw4s5sd3000000002eg00000000muzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.9	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225359Z-1657d5bbd48q6t9vvmrkd293mg00000002m000000000dxny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:53:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225359Z-1657d5bbd48qjg85buwfdynm5w00000002m000000000z1s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.9	49771	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	641	OUT	GET /wp-content/themes/cocoon-master/webfonts/icomoon/style.css?v=2.7.0.2&ver=6.6.2&fver=20241001072351 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:53:59 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/css Content-Length: 3982 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "f8e-62365340141bb" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:53:59 UTC	3982	IN	Data Raw: 5b 63 6c 61 73 73 5e 3d 22 69 63 6f 6e 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 2f 2a 20 75 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 70 72 65 76 65 6e 74 20 69 73 73 75 65 73 20 77 69 74 68 20 62 72 6f 77 73 65 72 20 65 78 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 20 63 68 61 6e 67 65 20 66 6f 6e 74 73 20 2a 2f 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 69 63 6f 6d 6f 6f 6e 27 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 73 70 65 61 6b 3a 20 6e 65 76 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 Data Ascii: [class^="icon-"], [class=" icon-"] { / use !important to prevent issues with browser extensions that change fonts */ font-family: 'icomoon' !important; speak: never; font-style: normal; font-weight: normal; font-variant: normal; text-trans

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49768	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:53:59 UTC	625	OUT	GET /wp-content/themes/cocoon-master/skins/silk/style.css?ver=6.6.2&fver=20241001072351 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:00 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:53:59 GMT Content-Type: text/css Content-Length: 57760 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "e1a0-62365340112db" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	16065	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 0a 20 20 53 6b 69 6e 20 4e 61 6d 65 3a 20 53 49 4c 4b ef bc 88 e3 82 b7 e3 83 ab e3 82 af ef bc 89 0a 20 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 e3 82 ad e3 83 bc e3 82 ab e3 83 a9 e3 83 bc e8 a8 ad e5 ae 9a e3 82 84 e3 83 80 e3 83 bc e3 82 af e3 82 b9 e3 82 ad e3 83 b3 e5 af be e5 bf 9c e3 81 ae e3 83 96 e3 83 ad e3 83 83 e3 82 af e3 82 a8 e3 83 87 e3 82 a3 e3 82 bf e3 83 bc e5 90 91 e3 81 91 43 6f 63 6f 6f 6e e3 82 b9 e3 82 ad e3 83 b3 e3 80 82 0a 20 20 41 75 74 68 6f 72 3a 20 e3 82 8d e3 81 93 0a 20 20 53 63 72 65 65 6e 73 68 6f 74 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 69 6d 2d 63 6f 63 6f 6f 6e 2e 6e 65 74 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 73 6b 69 6e 2d 73 69 Data Ascii: @charset "UTF-8";/* Skin Name: SILK Description: Cocoon Author: Screenshot URI: https://im-cocoon.net/wp-content/uploads/skin-si
2024-10-06 22:54:00 UTC	16384	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 6c 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 69 6d 65 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 75 72 6c 22 5d 2c 0a 74 65 78 74 61 72 65 61 2c 0a 73 65 6c 65 63 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 35 33 2c 20 31 35 33 2c 20 31 35 33 2c 20 30 2e 34 29 3b 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e Data Ascii: nput[type="search"],input[type="tel"],input[type="time"],input[type="url"],textarea,select { border-radius: 2px; border-width: 2px; border-color: rgba(153, 153, 153, 0.4);}input[type="submit"] { padding: 1em; color: #fff; font-size: 0.
2024-10-06 22:54:00 UTC	16384	IN	Data Raw: 65 6e 74 3a 20 22 5c 30 32 35 62 36 22 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 0a 7d 0a 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 61 71 20 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 61 71 20 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 61 71 20 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 0a 2e 69 73 2d 73 74 79 6c 65 2d 66 61 71 20 2e 74 Data Ascii: ent: "\025b6"; transform: rotate(90deg);}.is-style-faq .toggle-button { background: transparent; border-radius: 0; box-shadow: none;}.is-style-faq .toggle-button:hover { opacity: 1;}.is-style-faq .toggle-button::before,.is-style-faq .t
2024-10-06 22:54:00 UTC	8927	IN	Data Raw: 74 2d 6e 61 76 69 2e 70 6f 73 74 2d 6e 61 76 69 2d 64 65 66 61 75 6c 74 20 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 70 61 67 65 72 2d 70 6f 73 74 2d 6e 61 76 69 2e 70 6f 73 74 2d 6e 61 76 69 2d 73 71 75 61 72 65 20 61 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 70 6f 73 74 2d 6e 61 76 69 2d 73 71 75 61 72 65 2e 70 6f 73 74 2d 6e 61 76 69 2d 62 6f 72 64 65 72 20 61 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 7d 0a 0a 2e 63 6f 6d 6d 65 6e 74 2d 62 74 6e 20 7b 0a 20 20 62 61 63 Data Ascii: t-navi.post-navi-default img { border-radius: 2px;}.pager-post-navi.post-navi-square a { margin: 0 10px; padding: 0 10px; border-radius: 2px;}.post-navi-square.post-navi-border a:last-child { border-left-width: 1px;}.comment-btn { bac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49796	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	620	OUT	GET /wp-content/themes/cocoon-child-master/style.css?ver=6.6.2&fver=20241001072819 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:00 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/css Content-Length: 845 Connection: close Last-Modified: Tue, 01 Oct 2024 07:28:19 GMT ETag: "34d-6236543f63fe8" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	845	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 43 6f 63 6f 6f 6e 20 43 68 69 6c 64 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 6f 63 6f 6f 6e e5 b0 82 e7 94 a8 e3 81 ae e5 ad 90 e3 83 86 e3 83 bc e3 83 9e 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 77 70 2d 63 6f 63 6f 6f 6e 2e 63 6f 6d 2f 0a 41 75 74 68 6f 72 3a 20 e3 82 8f e3 81 84 e3 81 b2 e3 82 89 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 6e 65 6c 6f 67 2e 6a 70 2f 0a 54 65 6d 70 6c 61 74 65 3a 20 20 20 63 6f 63 6f 6f 6e 2d 6d 61 73 74 65 72 0a 56 65 72 73 69 6f 6e 3a 20 20 20 20 31 2e 31 2e 33 0a 2a 2f 0a 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: @charset "UTF-8";/!Theme Name: Cocoon ChildDescription: CocoonTheme URI: https://wp-cocoon.com/Author: Author URI: https://nelog.jp/Template: cocoon-masterVersion: 1.1.3//********************************

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.9	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd487nf59mzf5b3gk8n000000028g00000000du5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.9	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd482krtfgrg72dfbtn00000002bg00000000emmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.9	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd48vhs7r2p1ky7cs5w00000002w000000000qmr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.9	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd48gqrfwecymhhbfm800000001d000000000m15e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.9	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd48dfrdj7px744zp8s00000002b000000000k08d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	49806	104.17.25.14	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	406	OUT	GET /ajax/libs/jquery-migrate/3.3.2/jquery-migrate.min.js?ver=3.0.1 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:00 UTC	924	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5fb4701e-2c03" Last-Modified: Wed, 18 Nov 2020 00:51:42 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 136470 Expires: Fri, 26 Sep 2025 22:54:00 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rh9o0zO0pqBeAH5fG6vb3AqISOx8JRQ2UFkUHXNvlQWDM77J0tAmEyTNZQJ7g7LTURW0e00v6reaHOsoTVfVeOiUqawmpFEtSu9kvRgenaKPR5mYrTNGL%2BlVsSg2DmhOQiouBI40"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce93b146d3942c1-EWR
2024-10-06 22:54:00 UTC	445	IN	Data Raw: 32 63 30 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 2c03/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 69 3d 31 3b 69 3c 3d 33 3b 69 2b 2b 29 7b 69 66 28 2b 6f 5b 69 5d 3c 2b 6e 5b 69 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 69 5d 3c 2b 6f 5b 69 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 32 22 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 26 26 65 28 22 33 2e 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 6a 51 75 65 72 79 20 33 Data Ascii: ){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 23 22 3d 3d 3d 65 26 26 28 75 28 22 6a 51 75 65 72 79 28 20 27 23 27 20 29 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 22 29 2c 74 5b 30 5d 3d 5b 5d 29 2c 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 73 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 73 2e 66 6e 2c 73 2e 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 66 2e 74 65 73 74 28 74 29 29 74 72 79 7b Data Ascii: pe.slice.call(arguments);return"string"==typeof e&&"#"===e&&(u("jQuery( '#' ) is not a valid selector"),t[0]=[]),l.apply(this,t)},s.fn.init.prototype=s.fn,s.find=function(t){var r=Array.prototype.slice.call(arguments);if("string"==typeof t&&f.test(t))try{
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 22 6a 51 75 65 72 79 2e 6e 6f 64 65 4e 61 6d 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 69 73 41 72 72 61 79 22 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 22 6a 51 75 65 72 79 2e 69 73 41 72 72 61 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 22 29 29 2c 65 28 22 33 2e 33 2e 30 22 29 26 26 28 6f 28 73 2c 22 69 73 4e 75 6d 65 72 69 63 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 2c 22 6a 51 75 65 Data Ascii: ()===t.toLowerCase()},"jQuery.nodeName is deprecated"),o(s,"isArray",Array.isArray,"jQuery.isArray is deprecated; use Array.isArray")),e("3.3.0")&&(o(s,"isNumeric",function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-parseFloat(e))},"jQue
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 76 3d 2f 5c 53 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 76 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 6f 6f 6c 65 61 6e 20 70 72 6f 70 65 72 74 69 65 73 3a Data Ascii: v=/\S+/g;function j(e){return e.replace(/-([a-z])/g,function(e,t){return t.toUpperCase()})}s.fn.removeAttr=function(e){var r=this;return s.each(e.match(v),function(e,t){s.expr.match.bool.test(t)&&(u("jQuery.fn.removeAttr no longer sets boolean properties:
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 7d 29 29 2c 73 2e 63 73 73 4e 75 6d 62 65 72 7c 7c 28 73 2e 63 73 73 4e 75 6d 62 65 72 3d 7b 7d 29 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 73 2e 66 6e 2e 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 73 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6f 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 6a 28 65 29 2c 6e 3d 72 2c 77 2e 74 65 73 74 28 6e 29 26 26 78 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e Data Ascii: })),s.cssNumber\|\|(s.cssNumber={}),Q=s.fn.css,s.fn.css=function(e,t){var r,n,o=this;return e&&"object"==typeof e&&!Array.isArray(e)?(s.each(e,function(e,t){s.fn.css.call(o,e,t)}),this):("number"==typeof t&&(r=j(e),n=r,w.test(n)&&x.test(n[0].toUpperCase()+n
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3d 5b 5d 2c 73 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 3d 7b 7d 2c 74 28 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2c 22 63 6f 6e 63 61 74 22 2c 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 2c 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 73 2e 65 76 65 6e 74 2e 66 69 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 74 79 70 65 2c 6e 3d 74 68 69 73 2e 66 69 78 48 6f 6f 6b 73 5b 72 5d 2c 6f 3d 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 75 28 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 20 61 72 65 20 64 65 Data Ascii: s.event.props=[],s.event.fixHooks={},t(s.event.props,"concat",s.event.props.concat,"jQuery.event.props.concat() is deprecated and removed"),s.event.fix=function(e){var t,r=e.type,n=this.fixHooks[r],o=s.event.props;if(o.length){u("jQuery.event.props are de
2024-10-06 22:54:00 UTC	1369	IN	Data Raw: 74 72 69 67 67 65 72 28 72 29 7d 7d 29 2c 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 6e 2e 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 61 64 79 22 29 7d 29 2c 73 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 72 65 61 64 79 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 26 26 75 28 22 27 72 65 61 64 79 27 20 65 76 65 6e 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 7d 7d 2c 73 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c Data Ascii: trigger(r)}}),s(function(){s(n.document).triggerHandler("ready")}),s.event.special.ready={setup:function(){this===n.document&&u("'ready' event is deprecated")}},s.fn.extend({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated"),this.on(e,null,t,
2024-10-06 22:54:00 UTC	1247	IN	Data Raw: 64 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 22 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 3a 76 6f 69 64 20 30 29 7d 2c 73 2e 61 6a 61 78 26 26 28 44 3d 73 2e 70 61 72 61 6d 2c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 72 26 26 28 75 28 22 6a 51 75 65 72 79 2e 70 61 72 61 6d 28 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 73 20 6a 51 75 65 72 79 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 7d 29 3b 76 61 72 20 Data Ascii: d DOM element"),arguments.length?this:void 0)},s.ajax&&(D=s.param,s.param=function(e,t){var r=s.ajaxSettings&&s.ajaxSettings.traditional;return void 0===t&&r&&(u("jQuery.param() no longer uses jQuery.ajaxSettings.traditional"),t=r),D.call(this,e,t)});var
2024-10-06 22:54:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.9	49800	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	624	OUT	GET /wp-content/themes/cocoon-child-master/keyframes.css?ver=6.6.2&fver=20241001072819 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:00 UTC	315	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/css Content-Length: 130 Connection: close Last-Modified: Tue, 01 Oct 2024 07:28:19 GMT ETag: "82-6236543f63fe8" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	130	IN	Data Raw: 2f 2a e3 82 a2 e3 83 8b e3 83 a1 e3 83 bc e3 82 b7 e3 83 a7 e3 83 b3 e3 81 ae 40 6b 65 79 66 72 61 6d 65 73 e7 94 a8 e3 81 ae 43 53 53 e3 82 b3 e3 83 bc e3 83 89 e3 82 92 e6 9b b8 e3 81 8f ef bc 88 e3 81 93 e3 81 93 e3 81 ab e6 9b b8 e3 81 8f e3 81 a8 41 4d 50 e7 94 a8 e3 81 a7 e7 b4 84 35 30 30 4b 42 e3 81 be e3 81 a7 e8 a8 98 e5 85 a5 e3 81 a7 e3 81 8d e3 81 be e3 81 99 ef bc 89 2a 2f Data Ascii: /@keyframesCSSAMP500KB/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.9	49804	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	656	OUT	GET /wp-content/themes/cocoon-master/webfonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://coworkingspacecity.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:01 UTC	296	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Length: 77160 Connection: close Last-Modified: Tue, 01 Oct 2024 07:23:51 GMT ETag: "12d68-623653402050c" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	16088	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-10-06 22:54:01 UTC	16384	IN	Data Raw: b2 b5 a3 ea fd 33 79 d8 c1 3b 8d 81 eb 55 7d 70 2f df 49 9f 0c 01 eb ff 0b 78 56 f9 78 d6 de 69 6c f8 46 bd 5a c5 ea 66 9b ff cb f9 68 58 da 63 87 98 d4 ec 1e 2e 62 0c e8 ea 42 2a ac 7c 26 bf e2 8f 7c 67 ab b7 65 2f ca 6b c8 75 bb fe 76 5c 5f 48 87 b6 9e 9e 62 82 a0 0c 07 fa 64 d9 70 e1 47 9b be 2f eb 41 9a 7d f3 c0 08 e3 ac ac 27 ec f7 78 c8 9c ae d5 8b e1 b9 3b d6 45 f0 dd d8 e9 0a cb 21 57 b8 dc df e8 04 07 80 6a cc cc 7b aa ed 9c d9 5a 49 24 df 7a be 7b 4f de 14 70 af 1e 3b e7 78 a6 12 b0 3d d7 ba 98 71 de 7b fd d3 f5 a0 f5 c9 35 fa 6c 32 b8 33 4f 8e 0c e5 3d 01 19 f9 40 ed 13 6a 86 6a 23 0c 13 f8 47 59 bf 54 93 6e a1 3e f9 26 de ac 0e af cd 23 83 cf 43 42 cf a9 ff 7a 4c 1e 75 79 b5 f9 dd 6c 7f 53 1f 02 ef 61 bd 61 97 a5 ee 30 c7 4c 54 76 82 c0 33 96 Data Ascii: 3y;U}p/IxVxilFZfhXc.bB*\|&\|ge/kuv\_HbdpG/A}'x;E!Wj{ZI$z{Op;x=q{5l23O=@jj#GYTn>&#CBzLuylSaa0LTv3
2024-10-06 22:54:01 UTC	16384	IN	Data Raw: e7 b0 86 20 16 fb 7a df 92 f2 a4 cb 56 d4 58 8f 19 15 a3 dd 95 78 ba 72 74 58 2f a0 41 d1 70 d7 32 b4 0f 08 5e 5b 31 7e 52 7b ef 08 eb 9a ac 97 19 b2 bc c9 87 a2 3a 6b 0e 43 11 55 12 27 35 6e 98 90 1c 25 a1 27 d7 43 58 02 50 30 36 47 83 db ae 91 fb 6c 5b e9 3c 96 1b 4e 83 73 63 4f 46 65 51 fa ca 2d 92 67 69 24 f3 18 52 4e e8 13 b2 fd 6f 19 37 d2 57 7a 9a 0d 5f 74 ba b9 22 3f ea 7a 3c 51 d5 eb 6c 26 b5 91 42 2c 35 ec a5 22 fa 7d 12 5c d9 11 db 69 5e 93 7c 7d c3 f0 b1 a2 52 9f 9c bd d8 19 e8 b4 6c 0f 3b 7f 24 89 8c d1 bb f9 27 64 78 77 e1 f2 41 2a c6 cd ba 31 0f 5f 77 f0 66 24 6f 72 97 77 a6 56 a5 15 24 0a c8 e9 54 1d db 48 06 69 f9 f3 03 fa f2 d3 4c 16 db e2 16 fc e4 6c 56 07 63 5c a0 a7 bc be 37 4f 0b ec 8a 9a 0e b7 f4 c5 b9 52 86 44 29 d7 5d ee f8 bc 8c Data Ascii: zVXxrtX/Ap2^[1~R{:kCU'5n%'CXP06Gl[<NscOFeQ-gi$RNo7Wz_t"?z<Ql&B,5"}\i^\|}Rl;$'dxwA*1_wf$orwV$THiLlVc\7ORD)]
2024-10-06 22:54:01 UTC	16384	IN	Data Raw: 0e f6 fd 45 67 ff c6 43 7f ff 28 a6 3c 15 7f 67 b7 64 ef db d7 d0 a0 72 4d 7b 4c 57 d2 ae 47 07 68 12 37 fc 39 b3 57 f7 46 c9 9c 2c 73 52 06 85 cb df 95 7a 48 37 d2 7a cf 99 cc 46 72 63 48 4b fc ff f8 1a df 6f 19 53 ae e1 e3 46 61 30 19 c3 16 ad 7a b2 81 95 68 c7 43 aa 1c ce d7 3a 2b 06 2f a1 9d af d5 d2 ad fd 5b 2d 57 98 c0 20 70 02 94 04 c0 d0 33 14 76 e8 ed 5c 75 71 c7 47 47 2b d4 9b 44 58 29 dd e0 9e 03 27 d6 06 e3 b7 26 4d eb 75 19 c6 97 d3 c3 9b 7e 45 ad bc de 88 8c 57 7f 17 70 a7 f6 db 35 02 4a d9 70 47 d5 a0 d3 d2 f4 b4 30 cc ea 8c 5f d5 d4 8d aa 8e 00 df 71 57 ff c4 98 94 98 0a 7f 5d 35 98 78 0c 92 00 c9 f6 a0 9e 16 e0 f9 31 cb 79 75 d2 26 e6 a7 0e af 38 48 c8 8f 27 13 9f fe 3b a4 d2 40 bb 3c 51 ee 76 f5 38 b9 84 8c ad be 75 56 ac 3c 1e e6 b7 c9 Data Ascii: EgC(<gdrM{LWGh79WF,sRzH7zFrcHKoSFa0zhC:+/[-W p3v\uqGG+DX)'&Mu~EWp5JpG0_qW]5x1yu&8H';@<Qv8uV<
2024-10-06 22:54:01 UTC	11920	IN	Data Raw: de af be 16 fb 87 d1 89 8b 2a b7 f4 a4 b7 c5 4b 13 a3 94 58 8e 83 af ef 3c f8 cf d1 67 ab fb 37 00 7c 60 10 80 cd da d6 7a 12 b0 c6 48 30 95 1c b4 cf 69 6b 59 98 3d 32 c7 16 16 e4 e1 ef fb e5 6e 0d 5f fb d7 75 ff 58 bf fe 47 57 56 d2 b9 8e 8e b3 81 59 5d 2f 4b 3c 4a ee 54 64 6e 16 9d b8 b8 59 b3 ed e6 f5 4a 4d 36 40 e0 e7 72 dd 8d 9c 1b f3 4e fb 62 6a be ef d3 44 1d 38 b5 7c 20 cd c2 27 e4 2b 5e 0e b7 6a 8d 8b 74 7d 8c f3 07 fb ce 81 b4 62 46 41 47 c4 8a 90 a4 bd cc 83 f9 e9 a2 2f af 9d 63 96 44 a7 3b 27 66 b4 7b 73 88 29 79 b1 c0 18 27 fa 09 f9 4b 31 37 b4 fa 93 45 e5 d3 6d fa e8 98 b7 d2 94 d3 7f 1b 6b e1 3c 23 fa 04 eb fd af e1 ea a8 8f 53 d4 f8 49 b8 c0 56 90 3a e0 09 c7 65 f0 f8 1b 38 1e 5a 99 28 74 20 69 bb f7 40 3e 06 f6 38 5b 84 e6 c0 eb 34 58 4c Data Ascii: *KX<g7\|`zH0ikY=2n_uXGWVY]/K<JTdnYJM6@rNbjD8\| '+^jt}bFAG/cD;'f{s)y'K17Emk<#SIV:e8Z(t i@>8[4XL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.9	49807	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	660	OUT	GET /wp-content/uploads/2024/10/umedaLightroom_MG_3733_TP_V.jpg-320x180.webp HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:01 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: image/webp Content-Length: 13606 Connection: close Last-Modified: Fri, 04 Oct 2024 03:03:45 GMT ETag: "3526-6239deb551f34" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	13606	IN	Data Raw: 52 49 46 46 1e 35 00 00 57 45 42 50 56 50 38 20 12 35 00 00 70 bc 00 9d 01 2a 40 01 b4 00 3e 49 20 8d 45 22 a2 21 12 d9 8e 84 28 04 84 a6 a3 ac 8a e0 01 5f a4 59 ad bc ed fd bf f8 3f a0 0f 95 ee 43 ee 0f e1 f9 53 eb 33 b0 7c ca fa 0b ff 0f f8 cf 6e ff ee 3d 62 ff 7d ff 69 ec 23 fd af d3 37 fc 7f da 3f 76 5f ba 3e a2 ff 6e 3f 6e 3d d4 ff e4 7e e8 7b bb fe a3 fe ff fe e7 b8 5f f4 df ef 1e b4 3e ad 1f dc bf ee 7f ff f7 39 fe 53 ff 1f d6 73 ff 47 b4 5f f7 9f fc 3e 98 3f ff ff ff f6 fa 73 9b c4 9f 98 3f aa fc 97 f3 c7 cb 07 c0 3f 7b ff 27 ee 03 fa 46 68 fd 5b fb 5f 33 3f 96 7e 1f fd 9f f8 ff 4f fc 57 f9 8f fe 8f a8 a7 b5 ff e2 7b 0c fd 7f 7c 2d a7 ff a9 ea 23 df 8f f9 fe 66 1f 69 ff a7 d2 2f d2 7f c8 7f d5 f7 02 fe 71 fd 77 fe 7f db 47 c9 5f f3 fc a4 7e d7 ff Data Ascii: RIFF5WEBPVP8 5p*@>I E"!(_Y?CS3\|n=b}i#7?v_>n?n=~{_>9SsG_>?s??{'Fh[_3?~OW{\|-#fi/qwG_~

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.9	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd48xlwdx82gahegw4000000002u000000000fp4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.9	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd48sqtlf1huhzuwq7000000002f0000000000yph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.9	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:00 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225400Z-1657d5bbd48vlsxxpe15ac3q7n00000002pg000000004bk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.9	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48f7nlxc7n5fnfzh0000000027g00000000k1te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.9	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:00 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48wd55zet5pcra0cg00000002p0000000006r6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48t66tjar5xuq22r800000002p0000000007408 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48jwrqbupe3ktsx9w00000002t000000000qgs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.9	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48gqrfwecymhhbfm800000001fg000000009sd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.9	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48dfrdj7px744zp8s00000002bg00000000g3qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.9	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225401Z-1657d5bbd48dfrdj7px744zp8s00000002ag00000000m8k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.9	49814	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	635	OUT	GET /wp-content/uploads/2024/10/image-4-320x180.jpg HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:02 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: image/jpeg Content-Length: 15132 Connection: close Last-Modified: Wed, 02 Oct 2024 03:20:22 GMT ETag: "3b1c-62375eb155be4" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	15132	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 00 00 00 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 00 02 03 01 08 ff c4 00 4b 10 00 02 01 03 02 03 05 05 05 05 04 06 08 07 00 00 01 02 03 00 04 11 05 21 06 12 31 13 22 41 51 61 07 14 32 71 81 91 a1 b1 c1 d1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$@"K!1"AQa2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.9	49815	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:01 UTC	635	OUT	GET /wp-content/uploads/2024/10/image-5-320x180.png HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://coworkingspacecity.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:02 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: image/png Content-Length: 89645 Connection: close Last-Modified: Wed, 02 Oct 2024 03:03:35 GMT ETag: "15e2d-62375af10985d" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	16063	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 b4 08 02 00 00 00 6a 86 62 46 00 00 80 00 49 44 41 54 78 da 5c fd 49 af 6d d9 76 1e 88 8d 6a ce b5 d6 de fb 94 b7 8a e2 05 df 7b 7c 7c 24 45 52 05 d3 96 94 90 12 b2 81 ec a4 0d 03 6e ba 63 3b e1 fc 07 06 dc 72 cf ee f9 0f 18 b6 61 f7 0d b8 e1 ae 53 90 d3 89 44 c2 99 52 52 29 59 a6 48 8a 94 32 c9 78 2f e2 46 dc ea 54 bb 58 6b ce 39 c6 70 63 cc b5 cf 95 81 08 44 dc e2 ec b3 cf 5e b3 18 e3 1b 5f 81 7f f7 1f fc f7 5f bf 79 f3 f5 4f be fe e6 9b 6f fe fa 5f fb 9d df f9 ad df 38 1d f6 22 09 89 44 04 89 c0 1d 11 cd bc d6 a2 da 1c 0d 11 01 d0 4c 11 90 90 cd 00 11 89 b0 94 22 c2 a6 0a 80 f3 3c bb a9 6a 03 24 20 fe cb bf fc f6 7f f9 bf fa 5f 1f 17 35 73 70 00 74 42 92 c4 6e ae 66 6e 6e aa 00 2a cc Data Ascii: PNGIHDR@jbFIDATx\Imvj{\|\|$ERnc;raSDRR)YH2x/FTXk9pcD^__yOo_8"DL"<j$ _5sptBnfnn*
2024-10-06 22:54:02 UTC	16384	IN	Data Raw: 49 a1 69 f1 5e 36 07 b2 45 58 4b 89 fc a1 99 e0 f0 94 02 07 df 6c 77 40 dc 6b 01 38 6b b9 70 dd cf b9 e2 2c 91 23 47 cc 2c ee 35 25 e1 94 ba c0 61 75 e7 89 a7 13 ce 5b 5c 98 c0 3b 13 8b 42 27 23 18 63 ad 33 28 15 51 54 11 c7 41 48 2c c4 40 08 92 b3 a4 01 57 eb fa de b6 75 ca 1d b9 29 b2 00 52 4a 09 dc 24 0d ff ed b7 bf aa b5 32 c2 ab d7 af e6 52 ae 2e 2e 5b 59 4a 2d d3 66 1c 87 e1 f2 e2 42 58 54 db 34 8e 21 17 e8 33 ae 70 2f 02 57 55 b5 13 21 31 43 96 74 9e 13 f8 6a 4c 13 9e e3 a5 d4 a5 48 ce 43 1e 87 9c 52 ab 0d 09 eb 3c 5f 5d 5d e7 3c 68 6b 66 4d 44 dc f5 62 b7 7d 7c 7c 0a 88 a7 35 3d 1c ef 6b 29 bb 8b 0b 73 ab b5 1d 8f f3 69 5e a2 d6 0b 0f 27 72 67 46 b9 bb fb 74 7d 7d 5d 6b db 6c 70 98 c6 15 78 47 22 6e 4d 23 43 c3 2c ca 5d ef 5e 49 44 02 20 32 58 77 Data Ascii: Ii^6EXKlw@k8kp,#G,5%au[\;B'#c3(QTAH,@Wu)RJ$2R..[YJ-fBXT4!3p/WU!1CtjLHCR<_]]<hkfMDb}\|\|5=k)si^'rgFt}}]klpxG"nM#C,]^ID 2Xw
2024-10-06 22:54:02 UTC	16384	IN	Data Raw: a6 9c 43 e0 10 82 b5 b8 74 44 80 e5 62 70 75 0d 80 c5 10 fa 2e 0d 5d e7 1b 9c 14 03 02 0e be 33 04 fc e0 fe 3d 26 ea ba ee b4 ef 1f f5 7d 09 e9 5f fe fa b7 3f fd f8 fd 7f f2 c3 cf fa 10 10 10 55 b0 65 78 35 3f 7a 30 08 eb 93 33 04 8b 7d a7 88 d7 77 db 31 97 d4 75 8b e5 e2 ec ec ec cf ff fe 9f 3e bc 7f 2f c6 d8 f5 fd e0 9b 8f 10 88 03 61 f3 e2 73 08 00 c6 b3 7e b8 d6 96 03 ae 26 e8 21 b0 c4 84 26 aa 87 71 f4 ac 5c a7 0a 18 68 e4 24 6d dd 8f ae 64 e8 ba e4 1c 56 df 40 c8 1c bd e7 bb 16 af b4 bc 21 cc 39 33 b7 d8 be 19 f8 ae 7e a8 e9 31 05 a6 d1 cc 67 22 1d 87 5a aa 99 95 5a c6 69 5a 2f 97 80 30 e5 29 86 e8 ba 1f 66 f5 74 35 4f 84 9e a5 d1 ac d2 52 bc 09 51 d1 90 a8 4b 1d 22 e4 d2 54 2e 34 53 4a 7c f2 db 32 66 80 c0 c9 3a 00 7e 10 30 10 00 12 b2 99 79 ae 52 Data Ascii: CtDbpu.]3=&}_?Uex5?z03}w1u>/as~&!&q\h$mdV@!93~1g"ZZiZ/0)ft5ORQK"T.4SJ\|2f:~0yR
2024-10-06 22:54:02 UTC	16384	IN	Data Raw: 54 13 d0 30 ed 73 d7 47 35 8d 01 a7 e9 d0 dc c8 48 2e 1d 57 35 43 45 68 c2 86 79 63 84 86 10 62 68 fb 1b 93 37 a2 57 04 5f eb a8 fa 63 aa 9e ce ad a2 52 aa 02 48 75 ca 12 ae 97 ab 8f 3e 7c cf 31 e3 bb dd e1 d9 cb 6b 42 44 26 6b 9f c8 ac bc 6b 21 a1 47 64 92 21 c0 7a b5 5a 3f 3c 2f 25 1f c6 43 15 b9 dd dc e6 cb bc 5a ad 42 4a 52 65 1c b3 82 c5 c0 7d df f9 aa 9f 7c 56 a2 92 62 64 e4 96 28 62 8a 1c a0 25 2a b7 a4 a8 63 0f e3 53 f4 f5 7a 0d 26 1e dc 9e a7 11 9b c9 8b 0e 63 de 6d 77 d7 37 b7 17 17 57 3e b4 f4 2b 1c 4c c4 60 3c 8c 25 e7 40 68 06 57 57 77 2f 5e be 2e 55 9e 3c 79 3a 95 f2 f4 fb 67 bb cd f6 fd f7 1e a7 2e 22 92 01 aa a8 2f 96 44 cd 10 57 eb d5 7e 7b 67 66 45 c4 2d ab cd 1f 0a 16 98 7c e1 3f 0c 43 db ad cd b9 1a ed 33 3a e2 ea ab f3 86 67 68 7d ce Data Ascii: T0sG5H.W5CEhycbh7W_cRHu>\|1kBD&kk!Gd!zZ?</%CZBJRe}\|Vbd(b%*cSz&cmw7W>+L`<%@hWWw/^.U<y:g."/DW~{gfE-\|?C3:gh}
2024-10-06 22:54:02 UTC	16384	IN	Data Raw: 00 92 8c 63 67 30 69 b4 35 1d 9b cd c3 f1 6a 4e 9c fb cc ed b6 db 94 e4 e8 68 d6 f7 ea 4e 99 18 ba 36 0d 43 cc 8b 95 28 e5 d5 89 02 b6 03 12 72 12 1c 02 2c e6 f9 e9 c9 e2 d1 c5 c5 dd fd fd 37 2f de 4c 72 39 5c 2c 8f d8 f9 b2 ac 40 53 92 3d 51 da ee 1a 82 db aa b8 58 f7 c3 8a 29 cb 33 d8 b7 c6 f7 1c 42 f0 ce 11 3b a2 31 b0 51 95 cb b2 60 0e 53 46 24 a8 cd 01 04 98 91 99 63 4a 12 15 11 c8 95 cb 65 85 a8 43 bc 1f 1d 2f 08 29 c5 14 07 10 31 34 e4 94 c6 43 48 4c c4 3e cb c8 79 05 28 ca 32 cb 7d 0c d2 77 7d db 35 7d df 6d f7 db 22 cf f3 3c 1b 3d 9d 63 e5 25 7d 4c 37 6f df 65 3e ab ea 7a b7 dd c5 84 61 3f ec 76 6d 9e 57 29 46 06 54 d1 30 0c 75 e5 05 c2 c3 76 1d a5 6f 87 1d 71 22 25 4d 1a 03 90 02 32 86 90 10 61 d3 68 55 79 25 a8 ab dc 42 bb 52 8a 44 38 84 54 66 Data Ascii: cg0i5jNhN6C(r,7/Lr9\,@S=QX)3B;1Q`SF$cJeC/)14CHL>y(2}w}5}m"<=c%}L7oe>za?vmW)FT0uvoq"%M2ahUy%BRD8Tf
2024-10-06 22:54:02 UTC	8046	IN	Data Raw: fb fb 87 14 63 9e e7 21 09 10 0f 29 22 00 8b bd ab d6 7b 80 77 e3 19 e9 d8 1d d6 77 a3 10 c1 26 f1 48 db 5d 1b 81 47 34 15 28 f3 b8 4a 46 83 f1 c2 f4 10 8c 15 9a 89 c8 2d ea 1e 51 c9 c6 27 df 9b 67 1e 74 60 53 82 f1 94 45 62 fd f6 d8 9b 8d fe 63 fd 9e ff 69 04 71 74 5d ef 88 47 0d 50 92 dd 66 db 75 6d df 0d af 5f bf 7a fd f2 75 d7 f7 c9 46 de 86 77 8d b1 28 f2 cc 3b 00 3d 3e 5a 3d 7e fc 78 3e af b3 2c b7 85 76 51 14 f6 12 19 67 d3 d6 48 ce 3b 1c 21 a5 3c b1 71 70 7c aa 70 6c 0e 33 9f 8d 3e 72 1d 0d 4b 3e cb 2c 73 d4 79 13 5f 31 a2 1b 65 b5 48 a6 8c 1f 42 70 4c ec 1c 21 4a 92 30 be b1 91 d8 99 54 98 98 bb b6 0b fd 26 c6 78 75 7d 73 7c 7c 32 5f 2e 8b 2c ab cb 5c e2 70 3c f3 79 46 08 f2 f4 d9 e5 ff e3 5f fe f3 7f fd bf fd e5 76 d7 fc e9 9f fe 7d ef 88 49 41 Data Ascii: c!)"{ww&H]G4(JF-Q'gt`SEbciqt]GPfum_zuFw(;=>Z=~x>,vQgH;!<qp\|pl3>rK>,sy_1eHBpL!J0T&xu}s\|\|2_.,\p<yF_v}IA

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.9	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:02 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225402Z-1657d5bbd487nf59mzf5b3gk8n000000029g000000009bcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.9	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:02 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225402Z-1657d5bbd48gqrfwecymhhbfm800000001cg00000000p6yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:02 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225402Z-1657d5bbd48t66tjar5xuq22r800000002k000000000m8y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:02 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225402Z-1657d5bbd482lxwq1dp2t1zwkc00000002e0000000006vbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:02 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225402Z-1657d5bbd48t66tjar5xuq22r800000002h000000000quaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.9	49827	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:02 UTC	417	OUT	GET /wp-content/uploads/2024/10/umedaLightroom_MG_3733_TP_V.jpg-320x180.webp HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:03 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:02 GMT Content-Type: image/webp Content-Length: 13606 Connection: close Last-Modified: Fri, 04 Oct 2024 03:03:45 GMT ETag: "3526-6239deb551f34" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:03 UTC	13606	IN	Data Raw: 52 49 46 46 1e 35 00 00 57 45 42 50 56 50 38 20 12 35 00 00 70 bc 00 9d 01 2a 40 01 b4 00 3e 49 20 8d 45 22 a2 21 12 d9 8e 84 28 04 84 a6 a3 ac 8a e0 01 5f a4 59 ad bc ed fd bf f8 3f a0 0f 95 ee 43 ee 0f e1 f9 53 eb 33 b0 7c ca fa 0b ff 0f f8 cf 6e ff ee 3d 62 ff 7d ff 69 ec 23 fd af d3 37 fc 7f da 3f 76 5f ba 3e a2 ff 6e 3f 6e 3d d4 ff e4 7e e8 7b bb fe a3 fe ff fe e7 b8 5f f4 df ef 1e b4 3e ad 1f dc bf ee 7f ff f7 39 fe 53 ff 1f d6 73 ff 47 b4 5f f7 9f fc 3e 98 3f ff ff ff f6 fa 73 9b c4 9f 98 3f aa fc 97 f3 c7 cb 07 c0 3f 7b ff 27 ee 03 fa 46 68 fd 5b fb 5f 33 3f 96 7e 1f fd 9f f8 ff 4f fc 57 f9 8f fe 8f a8 a7 b5 ff e2 7b 0c fd 7f 7c 2d a7 ff a9 ea 23 df 8f f9 fe 66 1f 69 ff a7 d2 2f d2 7f c8 7f d5 f7 02 fe 71 fd 77 fe 7f db 47 c9 5f f3 fc a4 7e d7 ff Data Ascii: RIFF5WEBPVP8 5p*@>I E"!(_Y?CS3\|n=b}i#7?v_>n?n=~{_>9SsG_>?s??{'Fh[_3?~OW{\|-#fi/qwG_~

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225403Z-1657d5bbd487nf59mzf5b3gk8n00000002bg00000000371b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225403Z-1657d5bbd48gqrfwecymhhbfm800000001f000000000bw64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:03 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225403Z-1657d5bbd48sqtlf1huhzuwq7000000002ag00000000k4cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.9	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225403Z-1657d5bbd48xlwdx82gahegw4000000002s000000000tyvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:03 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.9	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225403Z-1657d5bbd48tqvfc1ysmtbdrg000000002g000000000cgq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.9	49834	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	392	OUT	GET /wp-content/uploads/2024/10/image-4-320x180.jpg HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:04 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: image/jpeg Content-Length: 15132 Connection: close Last-Modified: Wed, 02 Oct 2024 03:20:22 GMT ETag: "3b1c-62375eb155be4" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	15132	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 00 00 00 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 00 02 03 01 08 ff c4 00 4b 10 00 02 01 03 02 03 05 05 05 05 04 06 08 07 00 00 01 02 03 00 04 11 05 21 06 12 31 13 22 41 51 61 07 14 32 71 81 91 a1 b1 c1 d1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$@"K!1"AQa2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.9	49833	118.27.95.26	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:03 UTC	392	OUT	GET /wp-content/uploads/2024/10/image-5-320x180.png HTTP/1.1 Host: coworkingspacecity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 22:54:04 UTC	321	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 06 Oct 2024 22:54:03 GMT Content-Type: image/png Content-Length: 89645 Connection: close Last-Modified: Wed, 02 Oct 2024 03:03:35 GMT ETag: "15e2d-62375af10985d" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Nginx-Cache: HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	16063	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 b4 08 02 00 00 00 6a 86 62 46 00 00 80 00 49 44 41 54 78 da 5c fd 49 af 6d d9 76 1e 88 8d 6a ce b5 d6 de fb 94 b7 8a e2 05 df 7b 7c 7c 24 45 52 05 d3 96 94 90 12 b2 81 ec a4 0d 03 6e ba 63 3b e1 fc 07 06 dc 72 cf ee f9 0f 18 b6 61 f7 0d b8 e1 ae 53 90 d3 89 44 c2 99 52 52 29 59 a6 48 8a 94 32 c9 78 2f e2 46 dc ea 54 bb 58 6b ce 39 c6 70 63 cc b5 cf 95 81 08 44 dc e2 ec b3 cf 5e b3 18 e3 1b 5f 81 7f f7 1f fc f7 5f bf 79 f3 f5 4f be fe e6 9b 6f fe fa 5f fb 9d df f9 ad df 38 1d f6 22 09 89 44 04 89 c0 1d 11 cd bc d6 a2 da 1c 0d 11 01 d0 4c 11 90 90 cd 00 11 89 b0 94 22 c2 a6 0a 80 f3 3c bb a9 6a 03 24 20 fe cb bf fc f6 7f f9 bf fa 5f 1f 17 35 73 70 00 74 42 92 c4 6e ae 66 6e 6e aa 00 2a cc Data Ascii: PNGIHDR@jbFIDATx\Imvj{\|\|$ERnc;raSDRR)YH2x/FTXk9pcD^__yOo_8"DL"<j$ _5sptBnfnn*
2024-10-06 22:54:04 UTC	16384	IN	Data Raw: 49 a1 69 f1 5e 36 07 b2 45 58 4b 89 fc a1 99 e0 f0 94 02 07 df 6c 77 40 dc 6b 01 38 6b b9 70 dd cf b9 e2 2c 91 23 47 cc 2c ee 35 25 e1 94 ba c0 61 75 e7 89 a7 13 ce 5b 5c 98 c0 3b 13 8b 42 27 23 18 63 ad 33 28 15 51 54 11 c7 41 48 2c c4 40 08 92 b3 a4 01 57 eb fa de b6 75 ca 1d b9 29 b2 00 52 4a 09 dc 24 0d ff ed b7 bf aa b5 32 c2 ab d7 af e6 52 ae 2e 2e 5b 59 4a 2d d3 66 1c 87 e1 f2 e2 42 58 54 db 34 8e 21 17 e8 33 ae 70 2f 02 57 55 b5 13 21 31 43 96 74 9e 13 f8 6a 4c 13 9e e3 a5 d4 a5 48 ce 43 1e 87 9c 52 ab 0d 09 eb 3c 5f 5d 5d e7 3c 68 6b 66 4d 44 dc f5 62 b7 7d 7c 7c 0a 88 a7 35 3d 1c ef 6b 29 bb 8b 0b 73 ab b5 1d 8f f3 69 5e a2 d6 0b 0f 27 72 67 46 b9 bb fb 74 7d 7d 5d 6b db 6c 70 98 c6 15 78 47 22 6e 4d 23 43 c3 2c ca 5d ef 5e 49 44 02 20 32 58 77 Data Ascii: Ii^6EXKlw@k8kp,#G,5%au[\;B'#c3(QTAH,@Wu)RJ$2R..[YJ-fBXT4!3p/WU!1CtjLHCR<_]]<hkfMDb}\|\|5=k)si^'rgFt}}]klpxG"nM#C,]^ID 2Xw
2024-10-06 22:54:04 UTC	16384	IN	Data Raw: a6 9c 43 e0 10 82 b5 b8 74 44 80 e5 62 70 75 0d 80 c5 10 fa 2e 0d 5d e7 1b 9c 14 03 02 0e be 33 04 fc e0 fe 3d 26 ea ba ee b4 ef 1f f5 7d 09 e9 5f fe fa b7 3f fd f8 fd 7f f2 c3 cf fa 10 10 10 55 b0 65 78 35 3f 7a 30 08 eb 93 33 04 8b 7d a7 88 d7 77 db 31 97 d4 75 8b e5 e2 ec ec ec cf ff fe 9f 3e bc 7f 2f c6 d8 f5 fd e0 9b 8f 10 88 03 61 f3 e2 73 08 00 c6 b3 7e b8 d6 96 03 ae 26 e8 21 b0 c4 84 26 aa 87 71 f4 ac 5c a7 0a 18 68 e4 24 6d dd 8f ae 64 e8 ba e4 1c 56 df 40 c8 1c bd e7 bb 16 af b4 bc 21 cc 39 33 b7 d8 be 19 f8 ae 7e a8 e9 31 05 a6 d1 cc 67 22 1d 87 5a aa 99 95 5a c6 69 5a 2f 97 80 30 e5 29 86 e8 ba 1f 66 f5 74 35 4f 84 9e a5 d1 ac d2 52 bc 09 51 d1 90 a8 4b 1d 22 e4 d2 54 2e 34 53 4a 7c f2 db 32 66 80 c0 c9 3a 00 7e 10 30 10 00 12 b2 99 79 ae 52 Data Ascii: CtDbpu.]3=&}_?Uex5?z03}w1u>/as~&!&q\h$mdV@!93~1g"ZZiZ/0)ft5ORQK"T.4SJ\|2f:~0yR
2024-10-06 22:54:04 UTC	16384	IN	Data Raw: 54 13 d0 30 ed 73 d7 47 35 8d 01 a7 e9 d0 dc c8 48 2e 1d 57 35 43 45 68 c2 86 79 63 84 86 10 62 68 fb 1b 93 37 a2 57 04 5f eb a8 fa 63 aa 9e ce ad a2 52 aa 02 48 75 ca 12 ae 97 ab 8f 3e 7c cf 31 e3 bb dd e1 d9 cb 6b 42 44 26 6b 9f c8 ac bc 6b 21 a1 47 64 92 21 c0 7a b5 5a 3f 3c 2f 25 1f c6 43 15 b9 dd dc e6 cb bc 5a ad 42 4a 52 65 1c b3 82 c5 c0 7d df f9 aa 9f 7c 56 a2 92 62 64 e4 96 28 62 8a 1c a0 25 2a b7 a4 a8 63 0f e3 53 f4 f5 7a 0d 26 1e dc 9e a7 11 9b c9 8b 0e 63 de 6d 77 d7 37 b7 17 17 57 3e b4 f4 2b 1c 4c c4 60 3c 8c 25 e7 40 68 06 57 57 77 2f 5e be 2e 55 9e 3c 79 3a 95 f2 f4 fb 67 bb cd f6 fd f7 1e a7 2e 22 92 01 aa a8 2f 96 44 cd 10 57 eb d5 7e 7b 67 66 45 c4 2d ab cd 1f 0a 16 98 7c e1 3f 0c 43 db ad cd b9 1a ed 33 3a e2 ea ab f3 86 67 68 7d ce Data Ascii: T0sG5H.W5CEhycbh7W_cRHu>\|1kBD&kk!Gd!zZ?</%CZBJRe}\|Vbd(b%*cSz&cmw7W>+L`<%@hWWw/^.U<y:g."/DW~{gfE-\|?C3:gh}
2024-10-06 22:54:04 UTC	16384	IN	Data Raw: 00 92 8c 63 67 30 69 b4 35 1d 9b cd c3 f1 6a 4e 9c fb cc ed b6 db 94 e4 e8 68 d6 f7 ea 4e 99 18 ba 36 0d 43 cc 8b 95 28 e5 d5 89 02 b6 03 12 72 12 1c 02 2c e6 f9 e9 c9 e2 d1 c5 c5 dd fd fd 37 2f de 4c 72 39 5c 2c 8f d8 f9 b2 ac 40 53 92 3d 51 da ee 1a 82 db aa b8 58 f7 c3 8a 29 cb 33 d8 b7 c6 f7 1c 42 f0 ce 11 3b a2 31 b0 51 95 cb b2 60 0e 53 46 24 a8 cd 01 04 98 91 99 63 4a 12 15 11 c8 95 cb 65 85 a8 43 bc 1f 1d 2f 08 29 c5 14 07 10 31 34 e4 94 c6 43 48 4c c4 3e cb c8 79 05 28 ca 32 cb 7d 0c d2 77 7d db 35 7d df 6d f7 db 22 cf f3 3c 1b 3d 9d 63 e5 25 7d 4c 37 6f df 65 3e ab ea 7a b7 dd c5 84 61 3f ec 76 6d 9e 57 29 46 06 54 d1 30 0c 75 e5 05 c2 c3 76 1d a5 6f 87 1d 71 22 25 4d 1a 03 90 02 32 86 90 10 61 d3 68 55 79 25 a8 ab dc 42 bb 52 8a 44 38 84 54 66 Data Ascii: cg0i5jNhN6C(r,7/Lr9\,@S=QX)3B;1Q`SF$cJeC/)14CHL>y(2}w}5}m"<=c%}L7oe>za?vmW)FT0uvoq"%M2ahUy%BRD8Tf
2024-10-06 22:54:04 UTC	8046	IN	Data Raw: fb fb 87 14 63 9e e7 21 09 10 0f 29 22 00 8b bd ab d6 7b 80 77 e3 19 e9 d8 1d d6 77 a3 10 c1 26 f1 48 db 5d 1b 81 47 34 15 28 f3 b8 4a 46 83 f1 c2 f4 10 8c 15 9a 89 c8 2d ea 1e 51 c9 c6 27 df 9b 67 1e 74 60 53 82 f1 94 45 62 fd f6 d8 9b 8d fe 63 fd 9e ff 69 04 71 74 5d ef 88 47 0d 50 92 dd 66 db 75 6d df 0d af 5f bf 7a fd f2 75 d7 f7 c9 46 de 86 77 8d b1 28 f2 cc 3b 00 3d 3e 5a 3d 7e fc 78 3e af b3 2c b7 85 76 51 14 f6 12 19 67 d3 d6 48 ce 3b 1c 21 a5 3c b1 71 70 7c aa 70 6c 0e 33 9f 8d 3e 72 1d 0d 4b 3e cb 2c 73 d4 79 13 5f 31 a2 1b 65 b5 48 a6 8c 1f 42 70 4c ec 1c 21 4a 92 30 be b1 91 d8 99 54 98 98 bb b6 0b fd 26 c6 78 75 7d 73 7c 7c 32 5f 2e 8b 2c ab cb 5c e2 70 3c f3 79 46 08 f2 f4 d9 e5 ff e3 5f fe f3 7f fd bf fd e5 76 d7 fc e9 9f fe 7d ef 88 49 41 Data Ascii: c!)"{ww&H]G4(JF-Q'gt`SEbciqt]GPfum_zuFw(;=>Z=~x>,vQgH;!<qp\|pl3>rK>,sy_1eHBpL!J0T&xu}s\|\|2_.,\p<yF_v}IA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.9	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48tqvfc1ysmtbdrg000000002g000000000cgre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.9	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd482tlqpvyz9e93p5400000002ug0000000002e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.9	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48762wn1qw4s5sd3000000002d000000000u4w8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.9	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48tqvfc1ysmtbdrg000000002g000000000cgrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.9	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48brl8we3nu8cxwgn00000002x000000000kqss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.9	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48tnj6wmberkg2xy800000002t00000000053gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48762wn1qw4s5sd3000000002k000000000522b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.9	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48gqrfwecymhhbfm800000001ag00000000z34y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48tnj6wmberkg2xy800000002u0000000001aec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.9	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:04 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225404Z-1657d5bbd48xsz2nuzq4vfrzg800000002f000000000htct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.9	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:05 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225405Z-1657d5bbd48dfrdj7px744zp8s00000002dg000000008dcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:05 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225405Z-1657d5bbd48tnj6wmberkg2xy800000002n000000000szvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.9	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:05 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225405Z-1657d5bbd48q6t9vvmrkd293mg00000002p0000000007qc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.9	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:05 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225405Z-1657d5bbd48brl8we3nu8cxwgn00000002zg000000007x80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:05 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225405Z-1657d5bbd48tnj6wmberkg2xy800000002ng00000000qfuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:05 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.9	49851	13.107.246.45	443	6928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:06 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225406Z-1657d5bbd48xsz2nuzq4vfrzg800000002e000000000n9n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:06 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.9	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:06 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225406Z-1657d5bbd48xdq5dkwwugdpzr000000002zg000000008f9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:06 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.9	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:06 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225406Z-1657d5bbd48sqtlf1huhzuwq7000000002dg000000006eeu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:06 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.9	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:06 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225406Z-1657d5bbd48lknvp09v995n79000000002b0000000003kzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:06 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.9	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:06 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225406Z-1657d5bbd48lknvp09v995n79000000002b0000000003m06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:06 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.9	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48xlwdx82gahegw4000000002u000000000fpn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:07 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.9	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48762wn1qw4s5sd3000000002c000000000xqra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.9	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48gqrfwecymhhbfm800000001ag00000000z38g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd482lxwq1dp2t1zwkc000000028g00000000vvvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48vhs7r2p1ky7cs5w00000002vg00000000s8h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f076ebb2-f01e-001f-3766-175dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48tnj6wmberkg2xy800000002m000000000wzye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.9	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48wd55zet5pcra0cg00000002qg000000001gs0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.9	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225407Z-1657d5bbd48vlsxxpe15ac3q7n00000002m000000000dw06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:07 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd482lxwq1dp2t1zwkc00000002c000000000es5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:08 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6dc6331d-801e-0047-0866-177265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd487nf59mzf5b3gk8n000000028g00000000dukt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.9	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:08 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd48762wn1qw4s5sd3000000002c000000000xqup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.9	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:08 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd48tqvfc1ysmtbdrg000000002g000000000cgzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.9	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:08 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6d2b2f65-e01e-0099-735a-17da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd482krtfgrg72dfbtn00000002b000000000h9zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.9	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:08 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd4824mj9d6vp65b6n400000002y0000000000rrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.9	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:08 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225408Z-1657d5bbd48vlsxxpe15ac3q7n00000002ng000000008bdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:08 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.9	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:09 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225409Z-1657d5bbd48q6t9vvmrkd293mg00000002m000000000dy5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:09 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.9	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:09 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225409Z-1657d5bbd48sdh4cyzadbb374800000002e000000000gxsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:09 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:09 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225409Z-1657d5bbd48vlsxxpe15ac3q7n00000002mg00000000cn71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:09 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.9	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:09 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225409Z-1657d5bbd48qjg85buwfdynm5w00000002mg00000000vu8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:09 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:09 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225409Z-1657d5bbd48xlwdx82gahegw4000000002s000000000tz8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:09 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.9	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:10 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225410Z-1657d5bbd48brl8we3nu8cxwgn00000002w000000000qtgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:10 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:10 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225410Z-1657d5bbd48wd55zet5pcra0cg00000002f000000000w15m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:10 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225410Z-1657d5bbd48qjg85buwfdynm5w00000002r000000000d62v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.9	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:10 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: c326dec7-201e-0003-0c12-17f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225410Z-1657d5bbd48tnj6wmberkg2xy800000002p000000000nhh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:10 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:10 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:10 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225410Z-1657d5bbd48tqvfc1ysmtbdrg000000002d000000000sk50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:10 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:11 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cad35e9e-b01e-0021-3602-17cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225411Z-1657d5bbd48xsz2nuzq4vfrzg800000002kg0000000036vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:11 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:11 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 75ef523f-601e-000d-02f2-162618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225411Z-1657d5bbd487nf59mzf5b3gk8n000000028000000000f9p8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:11 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.9	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:11 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3e7839e3-701e-0053-5cff-163a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225411Z-1657d5bbd48xsz2nuzq4vfrzg800000002fg00000000eudh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:11 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.9	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:11 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 87e265fd-201e-0051-4fe7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225411Z-1657d5bbd48lknvp09v995n790000000027000000000m57g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:11 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:11 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c9f5e5fc-201e-0071-5dfe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225411Z-1657d5bbd482tlqpvyz9e93p5400000002mg00000000szkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:11 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:12 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c7b470af-b01e-005c-24fe-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225412Z-1657d5bbd48xdq5dkwwugdpzr000000002yg00000000cc03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:12 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:12 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: dfa7567c-f01e-003f-67de-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225412Z-1657d5bbd48wd55zet5pcra0cg00000002n000000000a7k5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:12 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.9	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:12 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 838d7376-001e-0014-17fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225412Z-1657d5bbd48tnj6wmberkg2xy800000002p000000000nhuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:12 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:12 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 20e89b60-501e-008c-3a03-17cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225412Z-1657d5bbd48q6t9vvmrkd293mg00000002mg00000000d5wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:12 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 22:54:12 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 22:54:12 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7d18055e-701e-0098-56ff-16395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T225412Z-1657d5bbd48xdq5dkwwugdpzr000000002vg00000000uckg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 22:54:12 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1952, Parent PID: 5408

General

Target ID:	0
Start time:	18:53:47
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6928, Parent PID: 1952

General

Target ID:	2
Start time:	18:53:52
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2024,i,14616006925215691485,9205885914510409272,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1132, Parent PID: 5408

General

Target ID:	3
Start time:	18:53:55
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://coworkingspacecity.com/"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://coworkingspacecity.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Static File Info

Network Behavior

Windows Analysis Report
https://coworkingspacecity.com/