Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
8ID0109FLT24PO92CD-R.pdf

Overview

General Information

Sample name:	8ID0109FLT24PO92CD-R.pdf
Analysis ID:	1528208
MD5:	e33f2072cfa289d755fc492fd7ce3491
SHA1:	fee8cabab23f25d93982a5b0082b27386b38f8e6
SHA256:	1250d0a168219e39eff144c0b12ce5b1a9df9d796303f8099794d498490c53e8
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Javascript checks online IP of machine

Classification

×

Process Tree

System is w10x64

Acrobat.exe (PID: 7448 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\8ID0109FLT24PO92CD-R.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7672 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7848 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1372,i,2033657756127450865,12014343967480728065,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://laiCRT0920.Kt8.cO/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 8848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2240,i,22978064906452545,7602595374261446839,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_206	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_206, type: DROPPED

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=

HTTP Parser: Number of links: 0

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=

HTTP Parser: Title: Secure Access Portal does not match URL

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=

HTTP Parser: function googletranslateelementinit() { new google.translate.translateelement({pagelanguage: 'en'}, 'google_translate_element'); } document.addeventlistener('domcontentloaded', function() { settimeout(function() { document.getelementbyid('preloader').style.display = 'none'; }, 3000); fetch('https://api.ipify.org?format=json') .then(response => response.json()) .then(data => document.getelementbyid('userip').textcontent = data.ip) .catch(() => document.getelementbyid('userip').textcontent = 'ip not available'); document.getelementbyid('togglepassword').addeventlistener('click', function() { const passwordfield = document.getelementbyid('password'); if (passwordfield.type === 'password') { passwordfield.type = 'text'; } else { passwordfield.type = 'password'; ...

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=

HTTP Parser: <input type="password" .../> found

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	HTTP Parser: No favicon
Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	HTTP Parser: No favicon

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	HTTP Parser: No <meta name="author".. found
Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	HTTP Parser: No <meta name="author".. found

Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	HTTP Parser: No <meta name="copyright".. found
Source: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.7:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.7:50031 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.244.42.65 104.244.42.65
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bUrdZSL86wtcyFx&MD=AK9+y2x6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /iway/bGVnYWxAZ3J1Ymh1Yi5jb20= HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laicrt0920.kt8.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/style.css HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iway/js/login.js HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://laicrt0920.kt8.coSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laicrt0920.kt8.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: laicrt0920.kt8.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: x.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laicrt0920.kt8.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172831253493879125; guest_id_ads=v1%3A172831253493879125; personalization_id="v1_Y4LP6d3yeOcvvsf5/fm1yQ=="; guest_id=v1%3A172831253493879125
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bUrdZSL86wtcyFx&MD=AK9+y2x6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: laicrt0920.kt8.co
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: x.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=eptTgo3L%2FL0e47aPr4thVwM%2Be4nwuCI1Iv%2BfWnQoeTmnaAj6WTCqyvwXXfGpJUcsYCCcwh4Xaz60u9au0MKSSBBKYono5FEATNtILtfUGsREKJO9DpNBHo2uAtOrONkk3XY%2Fgw%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 460Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 14:48:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-Powered-By: ExpressContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eptTgo3L%2FL0e47aPr4thVwM%2Be4nwuCI1Iv%2BfWnQoeTmnaAj6WTCqyvwXXfGpJUcsYCCcwh4Xaz60u9au0MKSSBBKYono5FEATNtILtfUGsREKJO9DpNBHo2uAtOrONkk3XY%2Fgw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8ceeb1d13a19c337-EWR

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: http://www.broofa.com
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_206.12.dr	String found in binary or memory: https://api.ipify.org?format=json
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: 8ID0109FLT24PO92CD-R.pdf	String found in binary or memory: https://laiCRT0920.Kt8.cO/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=)
Source: chromecache_204.12.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_204.12.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_206.12.dr	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: ReaderMessages.0.dr	String found in binary or memory: https://www.adobe.co
Source: chromecache_204.12.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_204.12.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_201.12.dr, chromecache_204.12.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.7:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.7:50031 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.winPDF@40/66@21/14

Source: 8ID0109FLT24PO92CD-R.pdf	Initial sample: https://laiCRT0920.Kt8.cO/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=
Source: 8ID0109FLT24PO92CD-R.pdf	Initial sample: https://laicrt0920.kt8.co/iway/bgvnywxaz3j1ymh1yi5jb20=

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7520

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-07 10-48-24-432.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\8ID0109FLT24PO92CD-R.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1372,i,2033657756127450865,12014343967480728065,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://laiCRT0920.Kt8.cO/iway/bGVnYWxAZ3J1Ymh1Yi5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2240,i,22978064906452545,7602595374261446839,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1372,i,2033657756127450865,12014343967480728065,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2240,i,22978064906452545,7602595374261446839,262144 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 8ID0109FLT24PO92CD-R.pdf	Initial sample: PDF keyword /JS count = 0
Source: 8ID0109FLT24PO92CD-R.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: 8ID0109FLT24PO92CD-R.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: PDF document	LLM: Page contains button: 'Click to View' Source: 'PDF document'
Source: PDF document	LLM: PDF document contains prominent button: 'click to view'

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://x1.i.lencr.org/	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
www3.l.google.com	172.217.18.14	true	false		unknown
api.ipify.org	104.26.12.205	true	false		unknown
www.google.com	216.58.206.68	true	false		unknown
x.com	104.244.42.65	true	false		unknown
laicrt0920.kt8.co	172.67.200.174	true	false		unknown
windowsupdatebg.s.llnwi.net	87.248.205.0	true	false		unknown
x1.i.lencr.org	unknown	unknown	false		unknown
translate.google.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=	false		unknown
https://laicrt0920.kt8.co/favicon.ico	false		unknown
https://api.ipify.org/?format=json	false		unknown
https://x.com/	false		unknown
https://laicrt0920.kt8.co/images/logo.png	false		unknown
https://a.nel.cloudflare.com/report/v4?s=eptTgo3L%2FL0e47aPr4thVwM%2Be4nwuCI1Iv%2BfWnQoeTmnaAj6WTCqyvwXXfGpJUcsYCCcwh4Xaz60u9au0MKSSBBKYono5FEATNtILtfUGsREKJO9DpNBHo2uAtOrONkk3XY%2Fgw%3D%3D	false		unknown
https://laicrt0920.kt8.co/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false		unknown
https://laicrt0920.kt8.co/css/style.css	false		unknown
https://laicrt0920.kt8.co/iway/js/login.js	false		unknown
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_204.12.dr	false		unknown
https://www.adobe.co	ReaderMessages.0.dr	false		unknown
https://laiCRT0920.Kt8.cO/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=)	8ID0109FLT24PO92CD-R.pdf	false		unknown
http://www.broofa.com	chromecache_201.12.dr, chromecache_204.12.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/cleardot.gif	chromecache_204.12.dr	false		unknown
https://api.ipify.org?format=json	chromecache_206.12.dr	false		unknown
https://translate.google.com	chromecache_204.12.dr	false		unknown
https://www.google.com/support/translate	chromecache_201.12.dr, chromecache_204.12.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
172.217.18.14	www3.l.google.com	United States		15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
172.67.200.174	laicrt0920.kt8.co	United States		13335	CLOUDFLARENETUS	false
104.244.42.65	x.com	United States		13414	TWITTERUS	false
104.26.12.205	api.ipify.org	United States		13335	CLOUDFLARENETUS	false
104.244.42.1	unknown	United States		13414	TWITTERUS	false
142.250.185.110	unknown	United States		15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.67.74.152	unknown	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.23
192.168.2.14

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528208
Start date and time:	2024-10-07 16:47:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	8ID0109FLT24PO92CD-R.pdf
Detection:	MAL
Classification:	mal52.phis.winPDF@40/66@21/14
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 52.5.13.197, 54.227.187.23, 52.202.204.11, 23.22.254.206, 172.64.41.3, 162.159.61.3, 2.19.126.143, 2.19.126.149, 2.23.197.184, 104.119.108.159, 87.248.205.0, 142.250.185.195, 142.250.184.238, 108.177.15.84, 34.104.35.123, 142.250.185.106, 172.217.16.202, 142.250.186.138, 142.250.185.170, 142.250.185.202, 142.250.186.106, 142.250.185.74, 142.250.186.170, 142.250.184.234, 172.217.23.106, 172.217.18.106, 216.58.212.170, 142.250.185.234, 216.58.212.138, 216.58.206.74, 216.58.206.42, 142.250.186.74, 142.250.185.138, 172.217.18.10, 142.250.186.42, 142.250.184.202, 142.250.181.234, 172.217.18.3, 142.250.185.78
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, time.windows.com, acroipm2.adobe.com, clients2.google.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, armmf.adobe.com, edgedl.me.gvt1.com, translate.googleapis.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 8ID0109FLT24PO92CD-R.pdf

Simulations

Behavior and APIs

Time	Type	Description
10:48:35	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: PDF document Model: jbxai	{ "brand":["PDF"], "contains_trigger_text":true, "trigger_text":"Click to View", "prominent_button_name":"Click to View", "text_input_field_labels":"unknown", "pdf_icon_visible":true, "has_visible_captcha":false, "has_urgent_text":false, "text":"Secure PDF Online Document", "has_visible_qrcode":false}

URL: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Model: jbxai	{ "brand":["Secure Access"], "contains_trigger_text":true, "trigger_text":"Welcome to Secure Access", "prominent_button_name":"Next", "text_input_field_labels":["legal@grubhub.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Loading...", "has_visible_qrcode":false}

URL: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Model: jbxai	{ "brand":["Secure Access"], "contains_trigger_text":true, "trigger_text":"Welcome to Secure Access", "prominent_button_name":"Next", "text_input_field_labels":["legal@grubhub.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Welcome to Secure Access Enter your email to securely get the file", "has_visible_qrcode":false}

URL: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Model: jbxai	{ "phishing_score":8, "brands":"Secure Access", "legit_domain":"secureaccess.com", "classification":"unknown", "reasons":["The brand 'Secure Access' is not widely recognized and is classified as 'unknown'.", "The URL 'laicrt0920.kt8.co' does not match any known domain associated with 'Secure Access'.", "The domain 'kt8.co' is a short domain and does not appear to be directly related to 'Secure Access'.", "The presence of a subdomain 'laicrt0920' is unusual and could be used to obfuscate the true nature of the site.", "The input field 'legal@grubhub.com' suggests a potential phishing attempt targeting Grubhub users, which is unrelated to 'Secure Access'."], "brand_matches":[false], "url_match":false, "brand_input":"Secure Access", "input_fields":"legal@grubhub.com"}

URL: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Model: jbxai	{ "phishing_score":8, "brands":"Secure Access", "legit_domain":"secureaccess.com", "classification":"unknown", "reasons":["The brand 'Secure Access' is not widely recognized and is classified as 'unknown'.", "The URL 'laicrt0920.kt8.co' does not match any well-known domain associated with 'Secure Access'.", "The domain 'kt8.co' is not commonly associated with 'Secure Access' or any well-known brand.", "The URL structure 'laicrt0920.kt8.co' includes a subdomain that does not provide any clear association with a legitimate brand.", "The presence of an email input field 'legal@grubhub.com' is suspicious as it does not relate to the brand 'Secure Access'.", "The domain 'kt8.co' could be a legitimate service provider, but without clear brand association, it raises suspicion."], "brand_matches":[false], "url_match":false, "brand_input":"Secure Access", "input_fields":"legal@grubhub.com"}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.244.42.65	http://is.gd/EmlK8C	Get hash	malicious	Unknown	Browse	twitter.com/
	wDeGiI6U9u.exe	Get hash	malicious	Gurcu Stealer	Browse	twitter.com/UVE4rzhe8O?12=1
	https://cutt.us/oPNMU?imp	Get hash	malicious	Unknown	Browse	twitter.com/cuturl
	http://www.secured-mailsharepoint.online/	Get hash	malicious	Unknown	Browse	twitter.com/
104.26.12.205	file.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	LummaC, PrivateLoader, Stealc, Vidar	Browse	api.ipify.org/
	Prismifyr-Install.exe	Get hash	malicious	Node Stealer	Browse	api.ipify.org/
	2zYP8qOYmJ.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Vidar	Browse	api.ipify.org/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
api.ipify.org	shipping.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	QUOTATIONS#08673.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	MAVI VATAN - VSL's DETAILS.docx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	http://pub-6abf9f4f2e414af1a92f1d0cac9c1674.r2.dev/auth_gen.html	Get hash	malicious	Unknown	Browse	172.67.74.152
	New order.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	http://netflix.dittmedlemskap.com/	Get hash	malicious	Unknown	Browse	172.67.74.152
	DHL_Shipment_Details_8th_October.pdf.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	http://duttweilerangel6891-sidebarg165895-flarew256.pages.dev/help/contact/656749019228815	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	http://duttweilerangel6891-sidebarg165895-flarew256.pages.dev/help/contact/581207279857749	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	setup_installer.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	172.67.74.152
windowsupdatebg.s.llnwi.net	https://fenster-mark-gmbhsharefile.btn-ebikes.com/	Get hash	malicious	Unknown	Browse	87.248.205.0
	http://46.27.141.62	Get hash	malicious	Unknown	Browse	87.248.205.0
	http://netflix.dittmedlemskap.com/	Get hash	malicious	Unknown	Browse	87.248.204.0
	https://pub-ed4436928a0f4db6a9860bf39f13ccf7.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	178.79.238.128
	https://pub-d55459157ebb42a9815eb5a80662b7e8.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	46.228.146.128
	http://tiktok1api.goodpay.buzz/	Get hash	malicious	Unknown	Browse	87.248.204.0
	http://milumuduli.github.io/netflix-template	Get hash	malicious	HTMLPhisher	Browse	87.248.204.0
	http://barik-ankita.github.io/Netflix-clone	Get hash	malicious	HTMLPhisher	Browse	87.248.205.0
	https://walletvalidator.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	87.248.205.0
	https://ad2856b9b0e7b744c59c43afe9662cee9ce9abdecb1bb7ab61ba226eb7.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	87.248.204.0

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.rhris.com/EmailEmploymentValidation.cfm?EmploymentRefID=E84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	104.21.44.9
	shipping.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-3132a9b3-4544474f5631-9e1721db7158d01a&q=1&e=fd99754d-b74a-4ce2-bf27-63a41e808f94&u=https%3A%2F%2Fwww.rhris.com%2FEmailEmploymentValidation.cfm%3FEmploymentRefID%3DE84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	104.21.44.9
	VML S.A..pdf	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	https://future.nhs.uk	Get hash	malicious	Unknown	Browse	104.18.70.113
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	IRYzGMMbSw.exe	Get hash	malicious	FormBook	Browse	172.67.181.150
	https://fenster-mark-gmbhsharefile.btn-ebikes.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
	uhwovHh7pS.msi	Get hash	malicious	VMdetect	Browse	172.67.202.193
	https://fenster-mark-gmbhsharefile.btn-ebikes.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
TWITTERUS	http://patjimmy323.wixsite.com/my-site-1/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.3
	http://ikergalindez.github.io/gofish/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.2
	http://stonemartin1001.wixsite.com/sky-result/	Get hash	malicious	Unknown	Browse	104.244.42.67
	http://ashleyproberts.wixsite.com/my-site/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.67
	http://webmailserv3038z.wixsite.com/my-site/	Get hash	malicious	Unknown	Browse	104.244.42.131
	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse	104.244.42.67
	http://clivenicoll44.wixsite.com/btinternet/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.195
	http://liendemail01.wixsite.com/my-site/	Get hash	malicious	Unknown	Browse	104.244.42.195
	http://frogsrus.wixsite.com/my-site-1/	Get hash	malicious	Unknown	Browse	104.244.42.195
	http://orange234.wixsite.com/my-site/	Get hash	malicious	Unknown	Browse	104.244.42.195
CLOUDFLARENETUS	https://www.rhris.com/EmailEmploymentValidation.cfm?EmploymentRefID=E84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	104.21.44.9
	shipping.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-3132a9b3-4544474f5631-9e1721db7158d01a&q=1&e=fd99754d-b74a-4ce2-bf27-63a41e808f94&u=https%3A%2F%2Fwww.rhris.com%2FEmailEmploymentValidation.cfm%3FEmploymentRefID%3DE84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	104.21.44.9
	VML S.A..pdf	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	https://future.nhs.uk	Get hash	malicious	Unknown	Browse	104.18.70.113
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	IRYzGMMbSw.exe	Get hash	malicious	FormBook	Browse	172.67.181.150
	https://fenster-mark-gmbhsharefile.btn-ebikes.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
	uhwovHh7pS.msi	Get hash	malicious	VMdetect	Browse	172.67.202.193
	https://fenster-mark-gmbhsharefile.btn-ebikes.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
TWITTERUS	http://patjimmy323.wixsite.com/my-site-1/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.3
	http://ikergalindez.github.io/gofish/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.2
	http://stonemartin1001.wixsite.com/sky-result/	Get hash	malicious	Unknown	Browse	104.244.42.67
	http://ashleyproberts.wixsite.com/my-site/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.67
	http://webmailserv3038z.wixsite.com/my-site/	Get hash	malicious	Unknown	Browse	104.244.42.131
	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse	104.244.42.67
	http://clivenicoll44.wixsite.com/btinternet/	Get hash	malicious	HTMLPhisher	Browse	104.244.42.195
	http://liendemail01.wixsite.com/my-site/	Get hash	malicious	Unknown	Browse	104.244.42.195
	http://frogsrus.wixsite.com/my-site-1/	Get hash	malicious	Unknown	Browse	104.244.42.195
	http://orange234.wixsite.com/my-site/	Get hash	malicious	Unknown	Browse	104.244.42.195

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.rhris.com/EmailEmploymentValidation.cfm?EmploymentRefID=E84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-3132a9b3-4544474f5631-9e1721db7158d01a&q=1&e=fd99754d-b74a-4ce2-bf27-63a41e808f94&u=https%3A%2F%2Fwww.rhris.com%2FEmailEmploymentValidation.cfm%3FEmploymentRefID%3DE84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	VML S.A..pdf	Get hash	malicious	HtmlDropper	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	https://future.nhs.uk	Get hash	malicious	Unknown	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	https://eu.pbe.encryption.symantec.com/login.html?msgUserId=682e23d9f715c97c&enterprise=lgas&locale=en_US	Get hash	malicious	Unknown	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	Credential Flusher	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	https://fenster-mark-gmbhsharefile.btn-ebikes.com/	Get hash	malicious	Unknown	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	gIXLkTvFeC.exe	Get hash	malicious	Vidar	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	https://issuu.com/smart_media/docs/die_welt_wirtschaft/19	Get hash	malicious	Unknown	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50
	Hscni Remittance_8115919700_16831215.html	Get hash	malicious	Tycoon2FA	Browse	2.19.244.127 52.149.20.212 13.107.246.45 20.12.23.50

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	300
Entropy (8bit):	5.16941418056264
Encrypted:	false
SSDEEP:	6:TcnM+q2PcNwi2nKuAl9OmbnIFUt8eTZmw+euMVkwOcNwi2nKuAl9OmbjLJ:wM+vLZHAahFUt8s/+sV54ZHAaSJ
MD5:	A2C9D002093E89FAAFE073B3B2542D86
SHA1:	9FF72757DBE32467E4E4D2C1581AA11728157505
SHA-256:	B823C1A16BCFF68DFDAFDB53DA395BE6565928D1AE56DA7E4ED142BFC53098D2
SHA-512:	FFCAA2372F71285765C8F3097B79B0243A09BED60B1C3E9A8AB7D68F9DF6B7AA76043020C580ADB48232761995A34B98C0D6CAEB28A9F985A7CC656016559E24
Malicious:	false
Reputation:	low
Preview:	2024/10/07-10:48:22.123 1e1c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/07-10:48:22.125 1e1c Recovering log #3.2024/10/07-10:48:22.125 1e1c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	300
Entropy (8bit):	5.16941418056264
Encrypted:	false
SSDEEP:	6:TcnM+q2PcNwi2nKuAl9OmbnIFUt8eTZmw+euMVkwOcNwi2nKuAl9OmbjLJ:wM+vLZHAahFUt8s/+sV54ZHAaSJ
MD5:	A2C9D002093E89FAAFE073B3B2542D86
SHA1:	9FF72757DBE32467E4E4D2C1581AA11728157505
SHA-256:	B823C1A16BCFF68DFDAFDB53DA395BE6565928D1AE56DA7E4ED142BFC53098D2
SHA-512:	FFCAA2372F71285765C8F3097B79B0243A09BED60B1C3E9A8AB7D68F9DF6B7AA76043020C580ADB48232761995A34B98C0D6CAEB28A9F985A7CC656016559E24
Malicious:	false
Reputation:	low
Preview:	2024/10/07-10:48:22.123 1e1c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/07-10:48:22.125 1e1c Recovering log #3.2024/10/07-10:48:22.125 1e1c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.155230284106378
Encrypted:	false
SSDEEP:	6:Tg7Q+q2PcNwi2nKuAl9Ombzo2jMGIFUt8etDgZmw+etDQVkwOcNwi2nKuAl9OmbX:07Q+vLZHAa8uFUt8CDg/+CDQV54ZHAaU
MD5:	D7C16C0C9CF52ABF4A7DAD5112086F45
SHA1:	418ECF031E7FFE91CA593D75205E2459AB3AB1AB
SHA-256:	8FA2F79B2F27EEA9D1E40F8BF242E0BD4B2F1C38948D8D73FC5B4DD06FC78D2E
SHA-512:	B1AAF7382E3E1A2E27D49DF2EB2D3FFE81DDE28914BF19A5B5E3DA208CE64EF2F3705A30695C610AED826D7351E993B30A354894DB8F6E5AAC3F2AD4F3CD2246
Malicious:	false
Reputation:	low
Preview:	2024/10/07-10:48:22.218 1edc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/07-10:48:22.219 1edc Recovering log #3.2024/10/07-10:48:22.219 1edc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.155230284106378
Encrypted:	false
SSDEEP:	6:Tg7Q+q2PcNwi2nKuAl9Ombzo2jMGIFUt8etDgZmw+etDQVkwOcNwi2nKuAl9OmbX:07Q+vLZHAa8uFUt8CDg/+CDQV54ZHAaU
MD5:	D7C16C0C9CF52ABF4A7DAD5112086F45
SHA1:	418ECF031E7FFE91CA593D75205E2459AB3AB1AB
SHA-256:	8FA2F79B2F27EEA9D1E40F8BF242E0BD4B2F1C38948D8D73FC5B4DD06FC78D2E
SHA-512:	B1AAF7382E3E1A2E27D49DF2EB2D3FFE81DDE28914BF19A5B5E3DA208CE64EF2F3705A30695C610AED826D7351E993B30A354894DB8F6E5AAC3F2AD4F3CD2246
Malicious:	false
Reputation:	low
Preview:	2024/10/07-10:48:22.218 1edc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/07-10:48:22.219 1edc Recovering log #3.2024/10/07-10:48:22.219 1edc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3f01a582-3a92-453c-a69c-f629cc6be845.tmp

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.967717088634269
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqpsBdOg2Hzcaq3QYiubSpDyP7E4TX:Y2sRdsjdMHK3QYhbSpDa7n7
MD5:	C6EEFE0AF7A04A7C06F0D86E4E2AB1C2
SHA1:	05A8218300D6C82240EB389B20814403E04557A5
SHA-256:	6FC20931082EC01EE3BA5C2B1910D9C91F5F59CFE333FF0A008B08090E69BE04
SHA-512:	A76A80B0086762806F5720C695DEE7D0E0BA70ED0160A941B0B08B33E0021CC9686CCF1C3242387611399EA26C0C507BD48880828B81659F007334169C7D12E1
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13372872508238183","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":156977},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.7","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967717088634269
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqpsBdOg2Hzcaq3QYiubSpDyP7E4TX:Y2sRdsjdMHK3QYhbSpDa7n7
MD5:	C6EEFE0AF7A04A7C06F0D86E4E2AB1C2
SHA1:	05A8218300D6C82240EB389B20814403E04557A5
SHA-256:	6FC20931082EC01EE3BA5C2B1910D9C91F5F59CFE333FF0A008B08090E69BE04
SHA-512:	A76A80B0086762806F5720C695DEE7D0E0BA70ED0160A941B0B08B33E0021CC9686CCF1C3242387611399EA26C0C507BD48880828B81659F007334169C7D12E1
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13372872508238183","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":156977},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.7","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.231670670386744
Encrypted:	false
SSDEEP:	96:CwNwpDGHqPySfkcr2smSX8I2OQCDh28wDtP6gFpgdZ:CwNw1GHqPySfkcigoO3h28ytPXFGdZ
MD5:	A516E52E29016F4F4A06F20526AED6CF
SHA1:	51ACC826AE11CA69D926D65BB344688DFC9205CE
SHA-256:	53313ACFEE7675F9BBAFCCD4D514887EADF6A8CC7C62F44E8A5D7189FB21D85E
SHA-512:	E320EA212BD069A05D8E1136ACDCA4CC8034203C263DDA75BD09401676DA140207CD476689AD2BDBC42380C2A1060FA2BEC71242489B2179B30DB6055F7F4D35
Malicious:	false
Reputation:	low
Preview:	...#................version.1..namespace-.aw.o................next-map-id.1.Pnamespace-aa11265e_f35e_4e5d_85db_f163e1c0f691-https://rna-resource.acrobat.com/.0I.$.r................next-map-id.2.Snamespace-9a9aa6d6_c307_4dda_b6c0_dc91084c8e68-https://rna-v2-resource.acrobat.com/.1!...r................next-map-id.3.Snamespace-1fbd9dc5_70a3_4975_91b4_966e0915c27a-https://rna-v2-resource.acrobat.com/.2..N.o................next-map-id.4.Pnamespace-0e0aed8d_6d6f_4be0_b28f_8e02158bc792-https://rna-resource.acrobat.com/.3.z.o................next-map-id.5.Pnamespace-52652c26_09c2_43f2_adf7_da56a1f00d32-https://rna-resource.acrobat.com/.4.{.^...............Pnamespace-aa11265e_f35e_4e5d_85db_f163e1c0f691-https://rna-resource.acrobat.com/.C..r................next-map-id.6.Snamespace-3a89c6b0_72b9_411a_9e44_fa247f34ac91-https://rna-v2-resource.acrobat.com/.5.q._r................next-map-id.7.Snamespace-02b23955_9103_42e0_ba64_3f8683969652-https://rna-v2-resource.acrobat.com/.6..d.o..............

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.200377660630668
Encrypted:	false
SSDEEP:	6:TrukpQ+q2PcNwi2nKuAl9OmbzNMxIFUt8e5ADgZmw+epYSQVkwOcNwi2nKuAl9Ob:uqQ+vLZHAa8jFUt8Rg/+MYSQV54ZHAab
MD5:	ECFC23709CC0C0B3184A4E93AFE1B4D0
SHA1:	C6FCFEA7D743559E1BE1296C253B8715118459BB
SHA-256:	33DF1354FD61E0FB5C280D314631E7560EEE695CD6CBE9D7D93D7C6AE4470F6C
SHA-512:	0653D2D9FB71FCD988BBDE5CC587FE9C29CCEF9C47A504343C91EE5AFB6D92210663A6ED796A09ADE754F9FA475AC854F09C5D21726A41CD5875350D23949F2E
Malicious:	false
Preview:	2024/10/07-10:48:22.925 1edc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/07-10:48:22.926 1edc Recovering log #3.2024/10/07-10:48:22.927 1edc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.200377660630668
Encrypted:	false
SSDEEP:	6:TrukpQ+q2PcNwi2nKuAl9OmbzNMxIFUt8e5ADgZmw+epYSQVkwOcNwi2nKuAl9Ob:uqQ+vLZHAa8jFUt8Rg/+MYSQV54ZHAab
MD5:	ECFC23709CC0C0B3184A4E93AFE1B4D0
SHA1:	C6FCFEA7D743559E1BE1296C253B8715118459BB
SHA-256:	33DF1354FD61E0FB5C280D314631E7560EEE695CD6CBE9D7D93D7C6AE4470F6C
SHA-512:	0653D2D9FB71FCD988BBDE5CC587FE9C29CCEF9C47A504343C91EE5AFB6D92210663A6ED796A09ADE754F9FA475AC854F09C5D21726A41CD5875350D23949F2E
Malicious:	false
Preview:	2024/10/07-10:48:22.925 1edc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/07-10:48:22.926 1edc Recovering log #3.2024/10/07-10:48:22.927 1edc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241007144826Z-154.bmp

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	3.060273995054348
Encrypted:	false
SSDEEP:	384:QuhueaU8U/EbPaieOHzVfp0ift2yY5p6lW:Quhue4U/pwHzVbEyY3z
MD5:	9E4C2AEEAE1ECED45EE48E18ABAF6C07
SHA1:	5399B679CC25D54A4EAC250E3C0C3C921FF4B6FC
SHA-256:	E8BC55BA2B6CA0DF39DADD839DD2104E97D3E72106ECBD7A85B6367D4600E5E0
SHA-512:	69265FF91E250FBF929C2BD78F60B0E363A3895185F66786938E1A9E17CFA8E114B8828D69E47271FBCF86B48250AD34A655C52306FA5D98A3B64A1050EBC81D
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.438974922574449
Encrypted:	false
SSDEEP:	384:yeaci5GqiBA7vEmzKNURFXoD1NC1SK0gkzPlrFzqFK/WY+lUTTcKqZ5bEmzVz:1KurVgazUpUTTGt
MD5:	8E85787BFFBC88DD961DC8684FE4A9D3
SHA1:	29145F8BA6F8C6E272A31CD3962088F79A5B7535
SHA-256:	9AE97498CF9D1BEB7BFF15B6C634BDAC62D42F54E4CF123C5799C5EB28F9561E
SHA-512:	2785E2B930AAC442C4ABAE81E324215E758D6CD9A737A83F2192C82CCB9FEC12C8298D74087DB3C9B10DA6367E3BB5B98104BAC151A3BCE4A97F7A5455759D74
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7737952543487654
Encrypted:	false
SSDEEP:	48:7MCp/E2ioyVGRioy3DoWoy1CABoy1RaKOioy1noy1AYoy1Wioy1hioybioynOoyp:7Rpju00iAYXKQ/Kb9IVXEBodRBk2
MD5:	40E127E30206127304548225EA027EF8
SHA1:	29AAA4C3E99F124E48CCBC1CBF00BD077A751B60
SHA-256:	AE42C565C1B4E9FE34F375AA47E96525600FE0841DC770D6D28DBC0DD77D46C3
SHA-512:	DB236F0167944065DAEE7014D168CA8F6349A7EFEBC38A574F9B412CC8348CC8088095402CDAFB063861429937DB570B9380272375015BB0EA79B47AF817F77B
Malicious:	false
Preview:	.... .c.....o.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7360682398396405
Encrypted:	false
SSDEEP:	3:kkFkll+UsNvfllXlE/HT8kyj/XNNX8RolJuRdxLlGB9lQRYwpDdt:kKvHQT8PVNMa8RdWBwRd
MD5:	5AF8178E8971E922350F1208ABE01BDD
SHA1:	F5CF75B13D4D8FE50F1144E1907AC9D8305375FC
SHA-256:	2526022325420C4421306E60761B123C955427EA084BB7627922F3B22202CACE
SHA-512:	E21F601C198F19750A6434313E14F0087270C1F91A4E398C55333C0761AC2626126F13C03E14AC0B134AD841C5080F0BDD8DD5C8FF31564374F86BEBACF524DE
Malicious:	false
Preview:	p...... ..........q.....(....................................................... ..........W....W...............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	290
Entropy (8bit):	2.973231916562605
Encrypted:	false
SSDEEP:	6:kKk99Usw9L+N+SkQlPlEGYRMY9z+4KlDA3RUe/:FD9LNkPlE99SNxAhUe/
MD5:	8DF4B2DACBE203729DD9745DC246CADF
SHA1:	A2947D6FD859CD88AC5C2F1456532E87ABC70C6A
SHA-256:	EE9007B4F93C10E300ECFBC610A747B29F87F1329CBDBF6349BF03160D10BEC1
SHA-512:	C387C3EF7CAA436DB34ECBA1B9481C510A1B7B6660BEA17B33C40902B39146A96B98AD75C167F38689F111B7D2CDF2C3678B36CCA78DB8907ECB7A35E9E54B54
Malicious:	false
Preview:	p...... ........n.......(....................................................... ........G..@.......................h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7520

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.333564810609235
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJM3g98kUwPeUkwRe9:YvXKXulgsdTeOR2OGMbLUkee9
MD5:	AF3EEE70195E0911FCDA5A83A44D2CFF
SHA1:	3E117BEB309657F0ABD6F365889EE85445650216
SHA-256:	4F4EBA913D39B9E4EB8135F9951B1699C407B0F4930DE75636317A80A4DC4212
SHA-512:	F25D469DB32764177CA36CE8F68C0C391A96EE27153AA7DF8759B63E18A492AFED85E78DC2CCD6C107DEF1B0650CA19F94817B1B2ACF734760166A0C5667E95C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.268183991291759
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfBoTfXpnrPeUkwRe9:YvXKXulgsdTeOR2OGWTfXcUkee9
MD5:	08ECD553C9179D35CECFD1C3E9D557D8
SHA1:	B851D60BDC6F9B1BA76409F6AE115600D8F88998
SHA-256:	B9A8454EB1C120AA0A80C94B29B4682F9FA6B50DC08152E3F508AC9460456176
SHA-512:	012EE3E033668BA444A90EB51C54BEA26FD6D0C476B05643C82C69BC8424E80EF3C6100CE63BAD69F332D9D48AA616F6BA61AB9146336DB8AC0E5E99FB236585
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.24523273267201
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfBD2G6UpnrPeUkwRe9:YvXKXulgsdTeOR2OGR22cUkee9
MD5:	C466B23CD7BE6482B6A631DEFFA030FA
SHA1:	B1E02AF8C55A771112007365B8E366E99111FDC7
SHA-256:	66CCE1C139B28FC7DFA14BE7BD6D81A3CFFE952E80664AC750CF3E2FD0BCFAEB
SHA-512:	E7EE43E1495F21B92CA03A9B4D15C789D317AB58ED46FB81A81C324A23CAE7F2A979FDAEDD6E50CF712E817768B2DC37F0EE1744E0E3C97FA984C92296ED50A3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.319397549704123
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfPmwrPeUkwRe9:YvXKXulgsdTeOR2OGH56Ukee9
MD5:	C0920F1C0B393D7DB4BD7148D36F8041
SHA1:	40D8EAAD03326705070A91B7D6C70D33E6DE53C0
SHA-256:	26B7F5DE7C31471C0C54F22EE198A70E84182810FB809027770EE31741FFEF3A
SHA-512:	217981CF9DD48579A3B9A48B3C6552C483DBF215708E0122AE355D05177F17BDDC6855A18F55EA7169D324504E56C50C56C0A2F1247F505C926121695F18EC4F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1091
Entropy (8bit):	5.680412549799836
Encrypted:	false
SSDEEP:	24:Yv6XFmeOR+pLgE7cgD6SOGtnnl0RCmK8czOCYvSW:YvNeG+hgs6SraAh8cvYKW
MD5:	5E732B2A567EC6ECEC901D3D3C7D36AC
SHA1:	9382F6C91CB32746784F6008A1A69568F8342329
SHA-256:	CE530B3CBCF1808D02880DAFCB4A2EFF997521CA5423E41B9D018CA617AF18AF
SHA-512:	16FB5B356F491FF1BA55EB445142D8C5C7245FC9801EBD792BFE2199F7F9F313B39621062584DFAF718942BA4D3420DFC3F4BF493A7EC3212D721F26F3C832A4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"89628_281075ActionBlock_2","campaignId":89628,"containerId":"1","controlGroupId":"","treatmentId":"67a3a874-888f-4d96-9f3d-26e70c3e0be1","variationId":"281075"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQgUERGIGZpbGVzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjoiUkdTMDM1MS1FTlUtQ2hhbGxlbmdlcjIifQ==","dataType":"ap

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.6487977899201836
Encrypted:	false
SSDEEP:	24:Yv6XFmeORoVLgEF0c7sbnl0RCmK8czOCYHflEpwiVH:YvNeGoFg6sGAh8cvYHWpwW
MD5:	F8C6011A655E2043D233D4E6BF1F2E80
SHA1:	AEFA6783F9453B2CBA03BADDC9607CCCA04D8E37
SHA-256:	D2523F4D3CE4498179C06C8484F5E31A3DB17CD49044A0BFD63C5E0C57CE1FDA
SHA-512:	939E5B27A607137A9D31C757A85636EEE24F83085C2556CFF9ACC529CA1E87669830990208758A4CD621142DA5FC6564945610C2584EE3580578AF2BA1169096
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2563086962248295
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfQ1rPeUkwRe9:YvXKXulgsdTeOR2OGY16Ukee9
MD5:	24D0399995C048C9BEA5F1AF9E065358
SHA1:	34D27288326036A073801D7B1F385A2DED3C7BFC
SHA-256:	570F2E0B95C396FAFA93139C02076A11B11850C185DC902DA4DF31EE4D7B520F
SHA-512:	4F0C8415A39296C0C461A23BD2733689A90B9D82111DAD6DC056A7B74009E91FD9A825E866CBBEEFDB21C1B4C60A825AFA66CE3FCB20079CEF044B034C96166C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1098
Entropy (8bit):	5.682950255096153
Encrypted:	false
SSDEEP:	24:Yv6XFmeORt2LgEFcs2SOGt0nl0RCmK8czOCUaBtCrfSW:YvNeGtogq2SrhAh8cvUgEmW
MD5:	3122DA683A04E30018577A4F43E3453F
SHA1:	E5EC7F2B584BFD35395A6DDA63309F2214059A82
SHA-256:	C756F84B1D1B65EF80AE60C0AD2BF7150B994A20EB8D2F6DE7324DFCCDBB4A99
SHA-512:	9D19D84EEE3555C2D6E28724332E3969274BB36B663E8D19B4FCF5BB24D7F36D764195267604C8F2EA43D2E564559AA88335D283ACCD9D3D30184BBB49CA837C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"89628_281075ActionBlock_0","campaignId":89628,"containerId":"1","controlGroupId":"","treatmentId":"abdf1d9d-2114-4953-95a6-4eed783b9872","variationId":"281075"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IlR1cm4gc2Nhbm5lZCBwYXBlciBkb2N1bWVudHNcbmludG8gaW5zdGFudGx5IGVkaXRhYmxlIFBERnMuIn0sInRjYXRJZCI6IlJHUzAzNTEtRU5VLUNoYWxsZW5nZXIyIn0=","dataTy

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.695485096882739
Encrypted:	false
SSDEEP:	24:Yv6XFmeORFKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5H:YvNeGFEgqprtrS5OZjSlwTmAfSKd
MD5:	BC71536E96C9397B9E3D6551091B899D
SHA1:	9D23492736F6369172BF13D014ADE060F89B96DB
SHA-256:	D383124186F1FD52E10E72568F9C0F97210DC759C2134C1C97FA0AB6E71C950E
SHA-512:	43AFB613947B6FDBA35BADC2F164199AD0CB0BBAB8E3AC1044D33F11E17FA6BAA0681C0EAC89AB0EA8038E401CB91289F303AA03EF691A1788A26CE080E76D00
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.261420838826803
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfYdPeUkwRe9:YvXKXulgsdTeOR2OGg8Ukee9
MD5:	EA7EA2B70A02B0A040901962714527F9
SHA1:	79518774A1C0D7C2D5B7694A9C2AD8E9EC5B3193
SHA-256:	B3B6C82EF09A2907140115B88D9A5CE95AA25A2B3AA5E25B4792BBE6D9A9569A
SHA-512:	945582CF3F24705F4C7B4D4230CE5D48CD62F46347DC843910C75C8850CB9AF468919FF80E78F89FC25069E9557760F85C1EF201C0DEBD178E8482A1816CAAE7
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.772458896238507
Encrypted:	false
SSDEEP:	24:Yv6XFmeOR4rLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNP:YvNeG4HgDv3W2aYQfgB5OUupHrQ9FJd
MD5:	5E1E3D6E0B5EF924C36AEB6B56668871
SHA1:	65FCC124EFAA34A8F954EE72894ADE4744E1DEEF
SHA-256:	63EC210ECE3F8844F2E8EF1912B6DB06FCCAF3D9F2297F857643CCB89F370429
SHA-512:	D7BFF9725122955B5636DE83B355BB4D48E92D4A8274D5DE85D4E4F02A8CE2DBB9488FB568EA431415938863155178C1B27E0F907FFA91FF32E4BD985FDCD2F3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.24523308537471
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfbPtdPeUkwRe9:YvXKXulgsdTeOR2OGDV8Ukee9
MD5:	E1E1CA2CC097F7EC4F3A8D1D7C5F0672
SHA1:	855F38D1CEAB903129342D17A2F85A3AE374DF5B
SHA-256:	926A7D95E5C21ED7190B628A0AA7B00A7D692DE58BE1FAB9D2711661339E6942
SHA-512:	4D31BA834FCA8EFC1F0DDD92A96D48E347E20261081FD3649C5B41CBEE116562BF2FAE0300BED06AA0E21F93A1E0FF57D3C660D7BCC3426D791F85BD46548A5C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.248700794717796
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJf21rPeUkwRe9:YvXKXulgsdTeOR2OG+16Ukee9
MD5:	072DDE3CC59718F81C56EF14B641D8AC
SHA1:	92E9A995E553CCEE79D68AD4B383033D4384496B
SHA-256:	EC4078D4F0B066028B31282AC8FF2F948F19DA24ED3DDD408E8D1CC8C086E999
SHA-512:	1FFAEDDA0BAF2A21EE8A2500B60110481536152AF47281918C08D96B086EC5591C993B997B772520D4F0211513C52DBC98F6B02829C273912C3ABAFED885EF16
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1054
Entropy (8bit):	5.662050234022335
Encrypted:	false
SSDEEP:	24:Yv6XFmeORiamXayLgE6cTg4QSOGtNaqnl0RCmK8czOC/CrfSW:YvNeG8BgSXQSrOAh8cv6mW
MD5:	3CA5C2B117B907F54DE3946FBEA3B228
SHA1:	80ABCDFC06D52E545256825D424ED84BF07E2F47
SHA-256:	8B25A4A1DC72AE73C4BFA19075B1260742F5AE80A4F59BE8CD935F7CF01DBCE4
SHA-512:	809FED659E5D5929BEE060D2C484862374527F52CC135B0EC0B8A47B0D282417519FD8CD783CD6E6CB4D2B6D33B183834CCE85236481501E8BD950F8C9F90CD9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"89628_281075ActionBlock_1","campaignId":89628,"containerId":"1","controlGroupId":"","treatmentId":"7fe39695-394c-4706-9b50-651e7499d428","variationId":"281075"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6IlJHUzAzNTEtRU5VLUNoYWxsZW5nZXIyIn0=","dataType":"application\/json","encodingScheme":tru

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.22429177917705
Encrypted:	false
SSDEEP:	6:YEQXJ2HXa5QQlQ4WsGiIPEeOF0YGR4Z2xoAvJfshHHrPeUkwRe9:YvXKXulgsdTeOR2OGUUUkee9
MD5:	336BB5A0EC7165AA2642D12B2CC4D9E4
SHA1:	E19E51CAE72224953EF56459AF9D55394A6A4AE6
SHA-256:	A8737F905ADBD85AEEA7E11DB401060937AEBB42A73F57294F3E42944F64AA0D
SHA-512:	592C48A6C2A5DF3742E0885AD124C985A027E38AED2EA55FD4F932F173881EAF910F8AB34D03B3449D3E78AA36FCAA29C9D83E9710F6EF50ED15F98E64CFF735
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.359963426330946
Encrypted:	false
SSDEEP:	12:YvXKXulgsdTeOR2OGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWtN:Yv6XFmeOR1168CgEXX5kcIfANhW
MD5:	1FAC7A5A7DBC2B00253E0B2F819BEA22
SHA1:	E25A41FC3BDC2EAC72AA610F5C777C1E07AE182B
SHA-256:	37270009E0F768FED87F2B4C431BD4139DB10A130023BF5576433E40A4134B07
SHA-512:	EBC617C713FABBAF159B41561034D3FC80C0EB5602B2D0BD26412FC9F47A37BCEA09DC2F0F425759815F94E54215E26ABFA14514BF689D84782A6C26CEE98E40
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"7cce23dc-4d10-4847-9cd8-e58c8c8c9e83","sophiaUUID":"83ABFDB2-FC78-4BD3-A96C-A13541192F3B"},"encodingScheme":true,"expirationDTS":1728487513232,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1728312508261}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.13561111390931
Encrypted:	false
SSDEEP:	24:YzDZYXa39naywJpwCd6rb9XpaeBYpFpjpWQsj0SLjj2S/F2LS1ZD08A5vVs9KGC7:YzkAbrBZt0TpH+XpFX908Aw9Kj
MD5:	9F9CC800D8161DB37614EDBC8115C85C
SHA1:	0E746AD438D3C70476FC46B161B420C70055A76A
SHA-256:	A6A29CC05A7D4699892374D7C9DC0A890D79CAC0C90BB335F2924AFA520CDF7D
SHA-512:	7FF2CF708D387B23DB0A96E03D4E6CBF6E41B2ACD4775A9903A23064E9397D602F966E646690F0D786FB9551BD6E87970652D71BA67FD5CE8F832F7B31A2E132
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"242b90c5721b1f64e4d4b1a37e0b0524","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1728312508000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"a49e58efe94b12964b6e93b46c1b15bb","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1728312508000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"69a39daf6943ed07edd604f0c1048e9f","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1054,"ts":1728312508000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"3fc30e4ac098f9b17f3c6feca5df15e5","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1091,"ts":1728312508000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"0a71e0ac315131bd6f05b0278e96341d","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1098,"ts":1728312508000},{"id":"Edit_InApp_Aug2020","info":{"dg":"cbf8f4ebe4c02261b29698921bf46f00","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.452683966250562
Encrypted:	false
SSDEEP:	48:TGufl2GL7msCvrBd6dHtbGIbPe0K3+fDy2dsb3lpr:lNVmsw3SHtbDbPe0K3+fDZdU
MD5:	105FF563B4C600D45210720D7BBC4175
SHA1:	B6697C99E9C48091CB89F5AC2651A392E6F82434
SHA-256:	C39E74F5F1F68AD0C0DAF598EF03E3450C318CD13D360C1A2BD0D15A0927F94C
SHA-512:	4C5480B50197492D912946200F01E4D850D9F73B4D27753D99D1C39DCFB43F5C22E92C486A5F658B13C5A48E121AB7AAE301DD85C10B871116D775DDAB06DD02
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.9540857894359842
Encrypted:	false
SSDEEP:	48:7MervrBd6dHtbGIbPe0K3+fDy2dsbO2qFl2GL7msS:7P3SHtbDbPe0K3+fDZd6KVmsS
MD5:	E70F06E86283B001B764604D3EE22AF6
SHA1:	C402412FC7AC574D8BDEFCBC8BC153C05892E9F0
SHA-256:	2D4C55E77D44219136C19D0B3FB39113118829E5FD6FF4E9EC7E89F9BD7EB8FA
SHA-512:	4154F8434F0FB211F5C065A090D7EEA70E46A21DB0A8600A425A0E3470EFC268AB1A6C3BB803CAC91EEA1806B84FBF63C350C8EB223CB346818BE03A0C74778E
Malicious:	false
Preview:	.... .c.....E!r.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................v.../.././././....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIaeeaf.LOG

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5177502348333967
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8yQRqdNYKw:Qw946cPbiOxDlbYnuRKTK
MD5:	BCD355F53DD4FE13A71EED4FD87A47B5
SHA1:	38C915EFC39DAC7DCF45EC7B2B5551E807275BFF
SHA-256:	26EB4A617326E154B2BF2D103119FF373F3EA54BF3B9FC327CCA7E74DBFEBE22
SHA-512:	7632913493B3F307C1CA5EAA487C66819A6DA33DCE96F1572BDEA241CAE236AF2ED7E6F20A50B547421E53DF6D4E891CDFC5759719077833B8C97989E8BC3282
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .0.7./.1.0./.2.0.2.4. . .1.0.:.4.8.:.2.9. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-07 10-48-24-432.log

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.386483451061953
Encrypted:	false
SSDEEP:	384:A2+jkjVj8jujXj+jPjghjKj0jLjmF/FRFO7t75NsXNsbNsgNssNsNNsaNsliNsTY:AXg5IqTS7Mh+oXChrYhFiQHXiz1W60ID
MD5:	F49CA270724D610D1589E217EA78D6D1
SHA1:	22D43D4BB9BDC1D1DEA734399D2D71E264AA3DD3
SHA-256:	D2FFBB2EF8FCE09991C2EFAA91B6784497E8C55845807468A3385CF6029A2F8D
SHA-512:	181B42465DE41E298329CBEB80181CBAB77CFD1701DBA31E61B2180B483BC35E2EFAFFA14C98F1ED0EDDE67F997EE4219C5318CE846BB0116A908FB2EAB61D29
Malicious:	false
Preview:	SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:808+0200 ThreadID=6044 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.327786256874054
Encrypted:	false
SSDEEP:	384:i2oTAyRT1mXh2YWuFAB7B29EwLqX/gwYcXxcvtVPqzSDn5cQvp0eNRgRwJdrcDQO:yjl
MD5:	D69686DD2EBF27921491BC8B45B19DFD
SHA1:	B26D925D4130A776EFEB4948337596D7DAB12B25
SHA-256:	75484A56ABCFD221D04E9473621C70442293A148E6016514C6957CD356611328
SHA-512:	C03910CFD2EFF6E631EF5203FBA7EDBB9DE0BE53CC60F113BB9B78B5DDE01390D4B67F75A39712A9B5C567C3D4218E0214A33E9FD4412402AFB71A226FAD51BA
Malicious:	false
Preview:	SessionID=a04bb15d-fc62-4976-a0e8-b95422ecfa1c.1728312504460 Timestamp=2024-10-07T10:48:24:460-0400 ThreadID=2024 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=a04bb15d-fc62-4976-a0e8-b95422ecfa1c.1728312504460 Timestamp=2024-10-07T10:48:24:461-0400 ThreadID=2024 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=a04bb15d-fc62-4976-a0e8-b95422ecfa1c.1728312504460 Timestamp=2024-10-07T10:48:24:461-0400 ThreadID=2024 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=a04bb15d-fc62-4976-a0e8-b95422ecfa1c.1728312504460 Timestamp=2024-10-07T10:48:24:461-0400 ThreadID=2024 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=a04bb15d-fc62-4976-a0e8-b95422ecfa1c.1728312504460 Timestamp=2024-10-07T10:48:24:461-0400 ThreadID=2024 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	35721
Entropy (8bit):	5.4085263465278555
Encrypted:	false
SSDEEP:	768:hRDD/ATOlQwlgR6RgRT4xk1Bh9+R6gRldy0+AyxkHBDgRh9gR840:hRDD/ATOlQwlgR6RgRT4xk1Bh9+R6gRY
MD5:	4FD5DC54A368A11E0466355A22A00688
SHA1:	2D93C45D13C4EE6F192984A0F218894DD017AFB2
SHA-256:	675CCDE0D18CF723635F2B362289A07702617DD52178237AB711C62D0C5D72D6
SHA-512:	046FB8A53775CF40A97D2681CEA8C9440D1D7637B52FE943ECD166124A328CA2ECCB7B78DB84B34E3173AB8822EFAEE60403999C34C0232E107FA95A4548B8C5
Malicious:	false
Preview:	05-10-2023 08:41:17:.---2---..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : *************************************..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : ***********************************..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : Starting NGL..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..05-10-2023 08:41:17:.Closing File..05-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\5fb05b76-9bb7-47e8-9672-1c5c8221434a.tmp

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\a710b5a7-3ea0-42a0-acb9-1c244553ed0a.tmp

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:bWNh3P6+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:C3PDegf121YS8lkipdjMMNB1DofjgJJg
MD5:	59EE5E2FB56A099CAA8EDFD7AF821ED6
SHA1:	F5DC4F876768D57B69EC894ADE0A66E813BFED92
SHA-256:	E100AAAA4FB2B3D78E3B6475C3B48BE189C5A39F73CFC2D22423F2CE928D3E75
SHA-512:	77A45C89F6019F92576D88AE67B59F9D6D36BA6FDC020419DAB55DBD8492BA97B3DAC18278EB0210F90758B3D643EA8DCF8EC2BD1481930A59B8BB515E7440FE
Malicious:	false
Preview:	...........].s..R/c..D@..\......3Z.....E.,...d{.k.~..H3....-......A...<>n.......X..Dp..d......f.{...9&F..........R.UW-..^..zC.kjOUUMm...nW...Z.7.J.R.....=.R........4..(WCMQ..u]]R...R......5...N)].....!.-.d]M....7.......i..rmP...6A.Z .=..~..$C-..}..Mo.T......:._'.S....r.9....6.....r....#...<U@.Iiu..X].T x.j....x...:q.....j]P3......[.5]\|..7;.5....^..7(.E..@..s...2..}..j.......t.5J...6Rf..%P{2T^$Y.V.O9.W...4...\ .5............Q.&j....h.+.u......W...4f]..s..(...:....`.<W_...zBs\|tF5 NI4.zD..5...u...!........M.0.K%F....,.c.....>R6..i..Am.y.~5..S....M...^......F.&..V...Z.......i....b....V..,.UH"...W...5}A.....KUT..=6jZ.....B...Z...Y(..u...=....x,2..."._Cf.....b...z7..... r..#.r..L9....2...R,..J?&..p..~.....3.=z...w..m..U..%._#<....r.....B.z..G..D.:4m.Z.&.N......</..Dz+.......vn.....;Qhk....!dw...A......3..a..K...).Q.`t[..)].6.%@....v.g.%E>;Z...uz.L..6Ct..O.Eo.O.e..........J.J$...:....K..)......F.....ZWE...z..5..g.io...l2[.,m9X..f......5\|:bj[.._R{gi...^

C:\Users\user\AppData\Local\Temp\acrocef_low\bfde7700-327a-441b-ae03-4e497afa6d68.tmp

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\c8a0f65e-c598-4ff0-a93b-0d9dcd226e75.tmp

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 199

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
URL:	https://laicrt0920.kt8.co/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 200

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.446439344671015
Encrypted:	false
SSDEEP:	3:YMb1gXMR4n:YMeXNn
MD5:	2E1E0B28D6E7522CB687E20D37BCD8AA
SHA1:	03D5EFE3719CAB433421C4D9BF6C73E0B8EB69E5
SHA-256:	124CE91528D8ACB894BDC980ABDDF035B38CDC64CE13F088D431E0B10D61FB24
SHA-512:	70BB31CA0F3907AB6B5860459643E422AAD6685F32D519C23E671CD46F29ABF2DB1F0C53E54313FF6FE7B54A75CDCA18A9232556B3273E6DB200BFCD22BA82BD
Malicious:	false
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"8.46.123.33"}

Chrome Cache Entry: 201

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	dropped
Size (bytes):	215113
Entropy (8bit):	5.570352237126515
Encrypted:	false
SSDEEP:	3072:7eYm2b2YkxI7io3HqQZ0B3o28wMCGVancJNp8EtLDQeuA0IyoQkXFMCJn:5WdAKCQ8qcJVf9
MD5:	EBBBA904A7BD9E8D7DD983769CF33F94
SHA1:	00045698170880BA6FD083CEC3720D8A9BDC4774
SHA-256:	432752C3610AD7C3BF752FFCE05DDFF87329811F90DF65F2E86DC2D0205DC2CA
SHA-512:	B4FB091B5E02027AFB595D8200DD336A32A19DA94C6E0D45038272ADE6479B5F341BF05420EBFD333CD73A94F97034CD9A9E2AFC5A7340A0E2480E131A03DDC9
Malicious:	false
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Jh,Kh,Lh,Uh,$h,ai,gi,hi,ii,ji,ni,mi,Qh;Jh=function(a){return _.$a?_.ab?_.ab.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Kh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Lh=function(){return _.bb()?Jh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.bb()?0:_.v("Edge"))\|\|_.v("Silk")};._.Mh=function(){return _.v("Safari")&&!(Lh()\|\|(_.bb()?0:_.v("Coast"))\|\|_.cb()\|\|(_.bb()?0:_.v("Edge"))\|\|(_.bb()?Jh("Microsoft Edge"):_.v("Edg/"))\|\|(_.bb()?Jh("Opera"):_.v("OPR"))\|\|Kh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Nh=function(){return _.v("Android")&&!(Lh()\|\|Kh()\|\|_.cb()\|\|_.v("Silk"))};_.Oh=function(a){return a instanceof _.gc};_.Ph=function(a){if(_.Oh(a))return a.g;throw Error("t");};_.Rh=function(a){if(Qh.test(a))return a};_.Sh=function(a){return a instanceof _.gc?_.Ph(a):_.Rh(a)};_.Th=function(a){return Array.prototype.slice.call(a)};.Uh=function(a){return typeof Symbol==="function"&&typeof

Chrome Cache Entry: 202

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwnL-Ks5vazHIRIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 203

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=YDA/d=0/rs=AN8SPfo2purg3MUBXTtjVeO_sPDrV4tGQA/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 204

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	215113
Entropy (8bit):	5.570352237126515
Encrypted:	false
SSDEEP:	3072:7eYm2b2YkxI7io3HqQZ0B3o28wMCGVancJNp8EtLDQeuA0IyoQkXFMCJn:5WdAKCQ8qcJVf9
MD5:	EBBBA904A7BD9E8D7DD983769CF33F94
SHA1:	00045698170880BA6FD083CEC3720D8A9BDC4774
SHA-256:	432752C3610AD7C3BF752FFCE05DDFF87329811F90DF65F2E86DC2D0205DC2CA
SHA-512:	B4FB091B5E02027AFB595D8200DD336A32A19DA94C6E0D45038272ADE6479B5F341BF05420EBFD333CD73A94F97034CD9A9E2AFC5A7340A0E2480E131A03DDC9
Malicious:	false
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.N455Dr-4gEE.O/am=AAAB/d=1/exm=el_conf/ed=1/rs=AN8SPfpG00H3b2Mf2gv6-bkwXXlzjBGYKQ/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Jh,Kh,Lh,Uh,$h,ai,gi,hi,ii,ji,ni,mi,Qh;Jh=function(a){return _.$a?_.ab?_.ab.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Kh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Lh=function(){return _.bb()?Jh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.bb()?0:_.v("Edge"))\|\|_.v("Silk")};._.Mh=function(){return _.v("Safari")&&!(Lh()\|\|(_.bb()?0:_.v("Coast"))\|\|_.cb()\|\|(_.bb()?0:_.v("Edge"))\|\|(_.bb()?Jh("Microsoft Edge"):_.v("Edg/"))\|\|(_.bb()?Jh("Opera"):_.v("OPR"))\|\|Kh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Nh=function(){return _.v("Android")&&!(Lh()\|\|Kh()\|\|_.cb()\|\|_.v("Silk"))};_.Oh=function(a){return a instanceof _.gc};_.Ph=function(a){if(_.Oh(a))return a.g;throw Error("t");};_.Rh=function(a){if(Qh.test(a))return a};_.Sh=function(a){return a instanceof _.gc?_.Ph(a):_.Rh(a)};_.Th=function(a){return Array.prototype.slice.call(a)};.Uh=function(a){return typeof Symbol==="function"&&typeof

Chrome Cache Entry: 205

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1997
Entropy (8bit):	4.803268378198321
Encrypted:	false
SSDEEP:	48:MLwyPqvQ5A4L965mvw4IwGCThR4Gb00lxhgbVY+WpRWe:MjPqOn94HFMtR3+q
MD5:	4CB76ABDE9079D959D3C4C882C733891
SHA1:	655553824DD1E3D29C22059238EA00FBEF9DA636
SHA-256:	AD8B7BF8FC7F5A2B9664ED03513B75AB8C662429463CAE1F76F0600A7B7EA041
SHA-512:	2E3B8DA8082F8F7496761E472F903F0D5B84F75CF89A3C7B6A54CB0D63591FC549EA708A77EEF9E198168E8CAFDF3536D8FCC1B0266ACDCBA23F765F23986452
Malicious:	false
URL:	https://laicrt0920.kt8.co/css/style.css
Preview:	body, html {. height: 100%;. margin: 0;. display: flex;. flex-direction: column;. justify-content: center;. align-items: center;. font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;. background-color: #f0f2f5;.}...header {. position: absolute;. top: 10px;. left: 10px;.}...header img.logo {. max-height: 60px;. max-width: 100%;. height: auto;. width: auto;. display: block;.}...container {. text-align: center;. position: relative;. padding: 20px;. background: white;. border-radius: 8px;. box-shadow: 0 2px 10px rgba(0,0,0,0.1);. width: 90%;. max-width: 400px;.}...login-form h1 {. font-size: 1.5rem;.}..input[type="email"], input[type="password"] {. width: calc(100% - 40px);. padding: 10px;. margin: 10px 20px;. border-radius: 8px;.}..button {. padding: 10px 20px;. border: none;. background-image: linear-gradient(to right, #007bff, #33bfff);. color: white;. cursor: pointer;. tran

Chrome Cache Entry: 206

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5025
Entropy (8bit):	4.698145803940787
Encrypted:	false
SSDEEP:	96:u1hEyxe47ZBweRsChEVzpXGSC6yCSi7osqIef5cN2lNsAc52ZlsH6e:AfBwejhwz8SCmcsqVfaN2lKAc52nsae
MD5:	88DEE26E2ECF1349F53B23C1F1BC61C8
SHA1:	2FA4B3742B360CD441D2B304FA9580FEED9B41AD
SHA-256:	41262605E7619A265A98B1759A0D80FD85BACB4CBE7F9A13096E4F63DD940030
SHA-512:	B1280640DAA83F8BD43FFD7B1B657E50C9F77C70BC329285669FB8839B66709EB019080A159B0A3855013F2F7E81BF7F41C5E07058E2F3B87F269CDEF71159C6
Malicious:	false
URL:	https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Secure Access Portal</title>. <link rel="stylesheet" href="/css/style.css">. <script src="https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit"></script>.</head>.<body>. <div class="preloader" id="preloader">Loading...</div>. <div class="header">. <img src="/images/logo.png" alt="Secure Access Logo" class="logo" onclick="document.getElementById('email').focus();">. </div>. <div class="container">. <div id="google_translate_element"></div>. <div class="login-form">. <h1>Welcome to Secure Access</h1>. <form id="loginForm">. <div id="emailSection">. <input type="email" id="email" name="email" placeholder="Enter your email" value="legal@grubhub.com" required>. <button type="button" class="next-btn" onclick="showPasswordInput()">Next</button>. </div>.

Chrome Cache Entry: 207

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 208

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.446439344671015
Encrypted:	false
SSDEEP:	3:YMb1gXMR4n:YMeXNn
MD5:	2E1E0B28D6E7522CB687E20D37BCD8AA
SHA1:	03D5EFE3719CAB433421C4D9BF6C73E0B8EB69E5
SHA-256:	124CE91528D8ACB894BDC980ABDDF035B38CDC64CE13F088D431E0B10D61FB24
SHA-512:	70BB31CA0F3907AB6B5860459643E422AAD6685F32D519C23E671CD46F29ABF2DB1F0C53E54313FF6FE7B54A75CDCA18A9232556B3273E6DB200BFCD22BA82BD
Malicious:	false
Preview:	{"ip":"8.46.123.33"}

Chrome Cache Entry: 209

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 58 x 65, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7231
Entropy (8bit):	7.96551338543272
Encrypted:	false
SSDEEP:	96:M6KQ+j91mvf+QUvpZhOne6qisRintIXICexzywZjt11unmVa85nBctwr:bKFrVNi/tIRWznjbEnmVX5uO
MD5:	60DA71024BDEAB30533F0AF1538ECF1F
SHA1:	331453B97B705436B739673A34C3F4FF0DD6DD15
SHA-256:	DD8A9FE8846C5693F1021CA5AC143A9AF808A03AC52E9F2EEEE9633E2084E622
SHA-512:	A4C8BE79BA966EC374B4EFBEA6B1D645A6542782F4AC4C47A69FBDFE8E868B46454AAD67685BF4CCFD90F6202DEF4FC36A5CC681A5C2F2E2C58E362537486413
Malicious:	false
URL:	https://laicrt0920.kt8.co/images/logo.png
Preview:	.PNG........IHDR...:...A......^.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....'.Y..<....IDATh..i.dU.......7O.r.$.r..d..(@.....R)m..W..k..r..]..R.]JY.C....r..dp.d...1I.$.2......".sv.8....].'c.x.E.s.>{.......~...Z.$.<.k.g......-;\s..W..u..5.E.hb......D6/0..K...y......^....{...........=Q...^2H...c.zP...6kDkbv-&...Ir.a..K..N.2.OAE.UU..z;:&...K.......1..M.q....+.LyN.A...a.....w.n.z.7U3>p`?....O7...tx..........._M....k~...J.1..DU.kK.s....'.iZ=tb..~.6..w..#T..........@....k..f.........."...........dQ.t.r.5c.:r..3.U..RU.._S.B....F.FD........J.1....k..PU>~......%I..\|..k7.P?.....3.7PO`.K....{.....u3...HO..4..C{.~..;.....c..onB...#(.Q.m...D..B..%........P..V..\|m..z..;0.{....^{9~....`T.!r..r.7......}F.....{v.SO......G...c.~.+we..c...Vk..9.{.+..h...."ja..!...?.....-.w...e.F......{...a8:...g..:\|.;sX.......;....#..g.....81.....K.ez.......$x.P...'i.p.I$....3.z.....8.p.b<x.omk9........^..Y..7.....P1..T<^...z..r.q

Chrome Cache Entry: 210

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 58 x 65, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7231
Entropy (8bit):	7.96551338543272
Encrypted:	false
SSDEEP:	96:M6KQ+j91mvf+QUvpZhOne6qisRintIXICexzywZjt11unmVa85nBctwr:bKFrVNi/tIRWznjbEnmVX5uO
MD5:	60DA71024BDEAB30533F0AF1538ECF1F
SHA1:	331453B97B705436B739673A34C3F4FF0DD6DD15
SHA-256:	DD8A9FE8846C5693F1021CA5AC143A9AF808A03AC52E9F2EEEE9633E2084E622
SHA-512:	A4C8BE79BA966EC374B4EFBEA6B1D645A6542782F4AC4C47A69FBDFE8E868B46454AAD67685BF4CCFD90F6202DEF4FC36A5CC681A5C2F2E2C58E362537486413
Malicious:	false
Preview:	.PNG........IHDR...:...A......^.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....'.Y..<....IDATh..i.dU.......7O.r.$.r..d..(@.....R)m..W..k..r..]..R.]JY.C....r..dp.d...1I.$.2......".sv.8....].'c.x.E.s.>{.......~...Z.$.<.k.g......-;\s..W..u..5.E.hb......D6/0..K...y......^....{...........=Q...^2H...c.zP...6kDkbv-&...Ir.a..K..N.2.OAE.UU..z;:&...K.......1..M.q....+.LyN.A...a.....w.n.z.7U3>p`?....O7...tx..........._M....k~...J.1..DU.kK.s....'.iZ=tb..~.6..w..#T..........@....k..f.........."...........dQ.t.r.5c.:r..3.U..RU.._S.B....F.FD........J.1....k..PU>~......%I..\|..k7.P?.....3.7PO`.K....{.....u3...HO..4..C{.~..;.....c..onB...#(.Q.m...D..B..%........P..V..\|m..z..;0.{....^{9~....`T.!r..r.7......}F.....{v.SO......G...c.~.+we..c...Vk..9.{.+..h...."ja..!...?.....-.w...e.F......{...a8:...g..:\|.;sX.......;....#..g.....81.....K.ez.......$x.P...'i.p.I$....3.z.....8.p.b<x.omk9........^..Y..7.....P1..T<^...z..r.q

Static File Info

General

File type:	PDF document, version 1.7, 1 pages (zip deflate encoded)
Entropy (8bit):	7.6648339799505685
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	8ID0109FLT24PO92CD-R.pdf
File size:	64'872 bytes
MD5:	e33f2072cfa289d755fc492fd7ce3491
SHA1:	fee8cabab23f25d93982a5b0082b27386b38f8e6
SHA256:	1250d0a168219e39eff144c0b12ce5b1a9df9d796303f8099794d498490c53e8
SHA512:	47eca82b2ce531cb983f8c8c0620507acc7333227aeccf62ca782c97032d7c40e4be44692b6b7ec2612262f1d2b166b4871a32e1b3598ee467045e6b32484cd0
SSDEEP:	1536:TRXN37Gxzx0Xz/ECSkJgL1/o3I9Dit3hoHH+wxbuYz:ZNrMO7ECSkk1/o3yDQ6n+OqYz
TLSH:	AC5309478C1D8797942847ACBD071E2D3F192A1DBC923AFF01621ED77E602261C9E56F
File Content Preview:	%PDF-1.7.%.....10 0 obj.<</A 11 0 R/P 3 0 R/Rect[0 0 612 792]/Subtype/Link>>.endobj.9 0 obj.<</Filter/FlateDecode/Length 10>>stream.x.+......\|.endstream.endobj.5 0 obj.<</Filter/FlateDecode/Length 124>>stream.x.m....0.Dw..g...i.xga........._0C.....,...&.A

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.664834
Total Bytes:	64872
Stream Entropy:	7.647682
Stream Bytes:	63093
Entropy outside Streams:	5.274126
Bytes outside Streams:	1779
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	12
endobj	12
stream	4
endstream	4
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
4	6f0f076b31756777	33f5752572a6ee5d65dc75a2f9b3bb5e

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 16:48:18.209587097 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:18.583909035 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:19.005666971 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 7, 2024 16:48:19.333833933 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:20.833730936 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:23.818114996 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:25.155215025 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:25.155215979 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:25.299307108 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:26.557833910 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:26.557881117 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:26.557957888 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:26.558516026 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:26.558535099 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.192456961 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.192537069 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.195833921 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.195842028 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.196106911 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.204813004 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.251398087 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.298379898 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.298408031 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.298423052 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.298481941 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.298497915 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.298513889 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.298547983 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.379638910 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.379662991 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.379755974 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.379792929 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.379842043 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.381268024 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.381284952 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.381346941 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.381360054 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.381416082 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.461781025 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.461821079 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.461915016 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.461962938 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.461983919 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.462064028 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.462727070 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.462753057 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.462812901 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.462836981 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.462855101 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.463144064 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.463521957 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.463546038 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.463850021 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.463865995 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.463908911 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.464483023 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.464507103 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.464555979 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.464565992 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.464603901 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.464627981 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.544732094 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.544800997 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.544845104 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.544872046 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.544891119 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.545207024 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.545259953 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.545310020 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.545325041 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.545341969 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.545341969 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.545488119 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546084881 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.546135902 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.546163082 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546178102 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.546192884 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546226978 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546662092 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.546793938 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.546821117 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546830893 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.546858072 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546869993 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.546956062 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.547075033 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.547122955 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.547419071 CEST	49707	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.547431946 CEST	443	49707	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.584558964 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.584600925 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.585732937 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.586306095 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.586384058 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.586764097 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.586788893 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.586812973 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.586863041 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.587577105 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.587584972 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.587774992 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588340998 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588350058 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.588396072 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588485003 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588499069 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.588552952 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588573933 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.588738918 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588752031 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.588810921 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588824987 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.588958025 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:27.588968039 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:27.701169014 CEST	443	49703	104.98.116.138	192.168.2.7
Oct 7, 2024 16:48:27.701299906 CEST	49703	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:28.201823950 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.202299118 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.202333927 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.202761889 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.202766895 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.206676960 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.207011938 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.207039118 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.207478046 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.207484007 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.210037947 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.210453987 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.210473061 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.210901022 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.210906029 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.238919973 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.239310980 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.239355087 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.239360094 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.239675045 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.239695072 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.239718914 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.239726067 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.240089893 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.240094900 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.298666954 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.298688889 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.298742056 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.298757076 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.298918009 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.298971891 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.299072981 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.299092054 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.299103975 CEST	49714	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.299109936 CEST	443	49714	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.302195072 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.302237034 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.302314997 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.302467108 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.302483082 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.302776098 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.302803040 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.302850962 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.302865982 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.302906036 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.303004980 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.303004980 CEST	49712	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.303011894 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.303025007 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.303071022 CEST	443	49712	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.304826975 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.304856062 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.304929018 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.305026054 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.305039883 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.306230068 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.306390047 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.306451082 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.306513071 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.306524992 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.306566000 CEST	49711	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.306571960 CEST	443	49711	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.308300018 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.308329105 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.308387995 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.308490038 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.308501959 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.338371038 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.338484049 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.338532925 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.339989901 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.340001106 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.340013027 CEST	49713	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.340018034 CEST	443	49713	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.342381954 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.342397928 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.342487097 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.342499018 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.342544079 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.342628956 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.342667103 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.342705965 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.343271017 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.343280077 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.343291998 CEST	49715	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.343297005 CEST	443	49715	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.355865955 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.355892897 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.356069088 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.357057095 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.357064009 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.357129097 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.359541893 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.359541893 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:28.359559059 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.359575033 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:28.612164021 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 7, 2024 16:48:29.027930021 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.028260946 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.029088020 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.029118061 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.029115915 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.029542923 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.029556990 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.030200005 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.030214071 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.030654907 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.030662060 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.031121969 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.031132936 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.031511068 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.031517029 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.124933958 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.125009060 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.126004934 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.126347065 CEST	49718	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.126364946 CEST	443	49718	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.127408028 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.127486944 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.127582073 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.128611088 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.128633976 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.128647089 CEST	49720	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.128653049 CEST	443	49720	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.128992081 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.129045010 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.129102945 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.129292011 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.129309893 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.129321098 CEST	49719	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.129327059 CEST	443	49719	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.132019043 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.132046938 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.132483006 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.132503986 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.132536888 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.132594109 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.133783102 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.133841038 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.133936882 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.134414911 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.134454012 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.134531021 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.134545088 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.134681940 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.134722948 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.151803970 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:29.151829004 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:29.151890993 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:29.153610945 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:29.153626919 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:29.202356100 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.202908039 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.202923059 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.203408957 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.203414917 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.207226992 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.207643986 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.207659960 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.208041906 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.208046913 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.301202059 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.301270962 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.301354885 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.308579922 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.308646917 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.308713913 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.308840036 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.308840036 CEST	49722	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.308851004 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.308860064 CEST	443	49722	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.309225082 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.309225082 CEST	49721	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.309230089 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.309238911 CEST	443	49721	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.313096046 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.313143969 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.313157082 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.313198090 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.313205957 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.313385010 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.313399076 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.313409090 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.313992023 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.314008951 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.772326946 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.772952080 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.772973061 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.773431063 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.773437977 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.775103092 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:29.780859947 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.781333923 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.781352043 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.781450987 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:29.781501055 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.781544924 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:29.781827927 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.781836033 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.782320976 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.782330036 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.782948017 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.782953024 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.785283089 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:29.785290956 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:29.785692930 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:29.825436115 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:29.868293047 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.868338108 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.868417978 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.868658066 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.868669987 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.868691921 CEST	49724	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.868711948 CEST	443	49724	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.871411085 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:29.871845961 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.871880054 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.871977091 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.872114897 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.872128963 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.877827883 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.877966881 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.878030062 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.878062963 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.878076077 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.878087997 CEST	49725	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.878094912 CEST	443	49725	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.878130913 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.878288031 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.878341913 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.878371954 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.878381014 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.878393888 CEST	49723	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.878400087 CEST	443	49723	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.881298065 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.881330967 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.881419897 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.882496119 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.882514000 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.882673025 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.882692099 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.882829905 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.882949114 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.882953882 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.937727928 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.938641071 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.938641071 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.938653946 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.938673019 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.941169977 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.941874027 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.941886902 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:29.941931009 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:29.941939116 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.028613091 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:30.028688908 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:30.028757095 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:30.029053926 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:30.029053926 CEST	49726	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:30.029067993 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:30.029079914 CEST	443	49726	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:30.033699036 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.033759117 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.034111023 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.035101891 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.035101891 CEST	49728	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.035115004 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.035124063 CEST	443	49728	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.037575006 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.037729025 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.038348913 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.067003012 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.067003012 CEST	49727	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.067019939 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.067033052 CEST	443	49727	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.101243019 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.101272106 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.101427078 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.106132030 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.106163025 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.106395960 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.106549978 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.106579065 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.107333899 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.107352018 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.135457039 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:30.135482073 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:30.135577917 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:30.136132956 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:30.136145115 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:30.613159895 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.613765955 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.613780975 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.614322901 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.614327908 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.617875099 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.618395090 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.618418932 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.618859053 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.618866920 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.682461977 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.683016062 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.683041096 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.683758974 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.683768034 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.715322018 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.715496063 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.715558052 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.715666056 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.715688944 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.715701103 CEST	49731	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.715709925 CEST	443	49731	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.719624996 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.719660997 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.719750881 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.720431089 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.720443010 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.743690968 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.743760109 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.744127989 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.744429111 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.744429111 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.744442940 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.744451046 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.746682882 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.746716976 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.746779919 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.746905088 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.746917963 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.780339003 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.780500889 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.780570030 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.780747890 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.780755043 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.780771017 CEST	49730	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.780775070 CEST	443	49730	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.783358097 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.783400059 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:30.783524990 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.783653975 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:30.783668041 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.118746042 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.119308949 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.119338989 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.119849920 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.119859934 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.129157066 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.129560947 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.129570961 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.129908085 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.129913092 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.135164022 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.135235071 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:31.136385918 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:31.136392117 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.136758089 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.137823105 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:31.179398060 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.214272976 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.214325905 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.214524031 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.214572906 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.214591026 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.214762926 CEST	49732	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.214773893 CEST	443	49732	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.217051029 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.217076063 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.217145920 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.217318058 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.217329025 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.225790977 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.225862026 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.225908041 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.226021051 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.226035118 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.226043940 CEST	49733	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.226048946 CEST	443	49733	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.228404045 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.228435040 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.228498936 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.228653908 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.228668928 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.356623888 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.357110977 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.357132912 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.357759953 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.357767105 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.395088911 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.395497084 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.395524979 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.395895004 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.395900965 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.409291029 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.409404993 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.409457922 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:31.410228968 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:31.410257101 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.410280943 CEST	49734	443	192.168.2.7	2.19.244.127
Oct 7, 2024 16:48:31.410290003 CEST	443	49734	2.19.244.127	192.168.2.7
Oct 7, 2024 16:48:31.431458950 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.431895971 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.431920052 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.432486057 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.432492971 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.453546047 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.453679085 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.453768969 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.454015970 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.454042912 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.454055071 CEST	49735	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.454063892 CEST	443	49735	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.457093000 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.457122087 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.457191944 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.457350969 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.457360029 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.533401012 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.533473969 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.533536911 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.533770084 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.533782959 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.533796072 CEST	49737	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.533802032 CEST	443	49737	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.536716938 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.536740065 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.536799908 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.536922932 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.536932945 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.585078955 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.585140944 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.585231066 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.585414886 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.585434914 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.585448980 CEST	49736	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.585458994 CEST	443	49736	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.587912083 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.587938070 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.588002920 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.588150024 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.588160038 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.848578930 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.849102020 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.849112034 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.849550962 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.849555969 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.862683058 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.863336086 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.863362074 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.863739967 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.863746881 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.943572998 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.943685055 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.943744898 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.943892002 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.943907976 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.943933010 CEST	49739	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.943938971 CEST	443	49739	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.946841955 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.946880102 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.947021961 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.947185993 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.947206020 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.979952097 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.980045080 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.980103016 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.980249882 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.980267048 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.980281115 CEST	49738	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.980288029 CEST	443	49738	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.982918978 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.982966900 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:31.983043909 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.983198881 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:31.983217001 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.085618973 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.086266994 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.086287975 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.086699009 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.086704969 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.166346073 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.167143106 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.167160988 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.167351961 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.167357922 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.207592010 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.207768917 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.207840919 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.208081961 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.208081961 CEST	49740	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.208098888 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.208106995 CEST	443	49740	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.210357904 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.210622072 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.210661888 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.210941076 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.210992098 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.211010933 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.211431980 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.211438894 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.211714029 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.211728096 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.262968063 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.263029099 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.263084888 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.263252974 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.263282061 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.263313055 CEST	49741	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.263320923 CEST	443	49741	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.266448021 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.266477108 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.266566992 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.266693115 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.266710043 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.306869030 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.306947947 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.307013035 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.307257891 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.307281971 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.307296991 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.307303905 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.310127020 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.310178995 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.310271978 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.310466051 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.310482979 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.557418108 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.557933092 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.557945013 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.558284044 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.558290005 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.644005060 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.644490004 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.644501925 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.644934893 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.644941092 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.675045013 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.675141096 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.675303936 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.675487041 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.675487041 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.675503969 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.675512075 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.677918911 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.677958012 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.678055048 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.678369045 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.678384066 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.742357969 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.742500067 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.742569923 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.742743969 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.742758036 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.742769003 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.742774010 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.745476961 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.745512009 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.745573997 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.745692015 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.745697975 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.851576090 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.852144957 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.852160931 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.852905035 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.852927923 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.928796053 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.929281950 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.929299116 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.929728985 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.929743052 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.932940006 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.933283091 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.933294058 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.933763981 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.933789968 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.950151920 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.950541973 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.950603008 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.950664043 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.950664043 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.950676918 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.950685024 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.953011990 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.953042030 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:32.953155994 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.953274965 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:32.953280926 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.029090881 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.029227972 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.029326916 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.029448986 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.029448986 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.029465914 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.029484987 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.030993938 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.031055927 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.031141996 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.031347036 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.031359911 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.031372070 CEST	49747	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.031378984 CEST	443	49747	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.032597065 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.032623053 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.032840967 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.032985926 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.032995939 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.033879042 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.033899069 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.034332037 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.034409046 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.034430027 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.303352118 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.304061890 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.304081917 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.304344893 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.304352045 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.355110884 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.355608940 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.355626106 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.356045961 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.356050014 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.400882959 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.400963068 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.401077032 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.401206970 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.401206970 CEST	49748	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.401227951 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.401252031 CEST	443	49748	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.403762102 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.403794050 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.403886080 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.403991938 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.404004097 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.451487064 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.451652050 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.451721907 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.451801062 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.451817036 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.451827049 CEST	49749	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.451832056 CEST	443	49749	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.455157042 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.455173969 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.455287933 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.455580950 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.455594063 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.564738035 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.565264940 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.565284014 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.565663099 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.565668106 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.645838976 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.646325111 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.646351099 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.646775007 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.646790028 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.647922039 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.648344994 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.648365974 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.648684978 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.648693085 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.672111988 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.672477961 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.672544003 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.674824953 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.674840927 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.674856901 CEST	49750	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.674861908 CEST	443	49750	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.678086996 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.678119898 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.678226948 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.678356886 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.678369999 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.740926027 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.741159916 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.741231918 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.745995998 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.746053934 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.746098042 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.758075953 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.758115053 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.758171082 CEST	49751	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.758179903 CEST	443	49751	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.758256912 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.758281946 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.758296013 CEST	49752	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.758304119 CEST	443	49752	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.761322021 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.761380911 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.761440992 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.762140036 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.762156963 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.762696981 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.762732983 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:33.763240099 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.763360977 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:33.763376951 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.021745920 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.022578955 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.022598982 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.023405075 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.023410082 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.067378044 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.067910910 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.067923069 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.069672108 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.069680929 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.118711948 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.118789911 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.118880987 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.119020939 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.119020939 CEST	49753	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.119039059 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.119046926 CEST	443	49753	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.121824980 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.121861935 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.122047901 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.122227907 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.122246981 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.161840916 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.161993980 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.162076950 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.162125111 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.162134886 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.162152052 CEST	49754	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.162158012 CEST	443	49754	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.164786100 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.164830923 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.164975882 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.165124893 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.165142059 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.300939083 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.301590919 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.301609993 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.302059889 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.302067041 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.365349054 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.365864992 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.365912914 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.366305113 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.366318941 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.399588108 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.399734020 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.399830103 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.399892092 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.399892092 CEST	49755	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.399907112 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.399916887 CEST	443	49755	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.402496099 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.402554035 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.402774096 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.402921915 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.402946949 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.409543037 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.410120964 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.410168886 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.410537004 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.410548925 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.460164070 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.460238934 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.460305929 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.460442066 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.460458994 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.460469961 CEST	49756	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.460474968 CEST	443	49756	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.462790012 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.462835073 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.462984085 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.463119984 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.463136911 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.538034916 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.538088083 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.538167953 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.538346052 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.538360119 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.538373947 CEST	49757	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.538378954 CEST	443	49757	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.540719986 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.540741920 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.540805101 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.540945053 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.540956020 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.772063017 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.777007103 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.777025938 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.777503014 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.777508020 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.795241117 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.795664072 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.795696020 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.796072960 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.796078920 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.870332956 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.870408058 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.870480061 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.870677948 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.870677948 CEST	49758	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.870692968 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.870701075 CEST	443	49758	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.873786926 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.873836040 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.873976946 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.874171972 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.874195099 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.896859884 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.896934032 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.897111893 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.897166014 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.897182941 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.897192955 CEST	49759	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.897198915 CEST	443	49759	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.899867058 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.899910927 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:34.900186062 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.900186062 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:34.900233030 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.035444021 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.036012888 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.036031961 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.036473036 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.036478996 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.083137989 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.083606005 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.083619118 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.084049940 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.084054947 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.460113049 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.460520983 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.460539103 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.461071014 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.461076975 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.462687016 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.462743044 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.462831020 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.463104963 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.463123083 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.463136911 CEST	49760	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.463149071 CEST	443	49760	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.465128899 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.465195894 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.465269089 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.466133118 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.466175079 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.466403961 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.466686010 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.466701984 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.466975927 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.466996908 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.467005968 CEST	49761	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.467012882 CEST	443	49761	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.470432997 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.470458031 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.471041918 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.475693941 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.475714922 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.592861891 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.592940092 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.593101025 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.593142986 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.593142986 CEST	49762	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.593153954 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.593163967 CEST	443	49762	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.595638990 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.595664024 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.595726967 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.595880985 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.595887899 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.658503056 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.659041882 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.659053087 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.659667969 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.659672976 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.661408901 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.661871910 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.661879063 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.662271023 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.662276983 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.758759022 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.758830070 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.758923054 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.760348082 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.760348082 CEST	49766	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.760358095 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.760368109 CEST	443	49766	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.764388084 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.764457941 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.764547110 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.766834021 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.766834021 CEST	49765	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.766840935 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.766848087 CEST	443	49765	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.769732952 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.769773006 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.769843102 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.774647951 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.774667978 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.777997017 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.778033972 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.778091908 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.778397083 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:35.778414965 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:35.935218096 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:35.935255051 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:35.935322046 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:35.936764002 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:35.936779976 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:36.118299007 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.118793964 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.118804932 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.119301081 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.119313955 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.147906065 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.148387909 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.148427010 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.148829937 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.148838043 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.201333046 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.201750040 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.201764107 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.202169895 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.202176094 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.207689047 CEST	49703	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:36.208117008 CEST	49774	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:36.208148003 CEST	443	49774	104.98.116.138	192.168.2.7
Oct 7, 2024 16:48:36.208412886 CEST	49774	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:36.209053993 CEST	49774	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:48:36.209074974 CEST	443	49774	104.98.116.138	192.168.2.7
Oct 7, 2024 16:48:36.213555098 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.213700056 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.213821888 CEST	443	49703	104.98.116.138	192.168.2.7
Oct 7, 2024 16:48:36.213907957 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.213957071 CEST	49768	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.213965893 CEST	443	49768	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.216309071 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.216336966 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.216417074 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.216527939 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.216542959 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.248271942 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.248419046 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.248898983 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.248956919 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.248975039 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.248986959 CEST	49767	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.248994112 CEST	443	49767	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.251838923 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.251878977 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.251983881 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.252139091 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.252156973 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.298382998 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.298429966 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.298712969 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.299247026 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.299262047 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.299273014 CEST	49770	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.299278975 CEST	443	49770	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.302021980 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.302052021 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.302201033 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.302297115 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.302310944 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.404076099 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.404489994 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.404505014 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.406198978 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.406203985 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.441803932 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.442420959 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.442433119 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.443856001 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.443861008 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.502046108 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.502105951 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.502178907 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.502348900 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.502360106 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.502367020 CEST	49772	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.502372026 CEST	443	49772	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.505251884 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.505289078 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.505511999 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.505511999 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.505554914 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.544883013 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.544959068 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.545300961 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.545566082 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.545573950 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.545620918 CEST	49771	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.545624971 CEST	443	49771	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.549508095 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.549552917 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.549762964 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.550961971 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.550981998 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.693193913 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:36.693276882 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:36.696813107 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:36.696824074 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:36.697068930 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:36.738061905 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:36.873001099 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.873511076 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.873534918 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.873960018 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.873967886 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.905513048 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.906374931 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.906384945 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.906639099 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.907022953 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.907042027 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.907161951 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.907166958 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.907418966 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.907426119 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.976435900 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.977005959 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.977911949 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.977950096 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.977962971 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.977972984 CEST	49775	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.977978945 CEST	443	49775	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.980621099 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.980638981 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:36.980721951 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.980911970 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:36.980926037 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.001143932 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.001197100 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.001496077 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.001496077 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.001589060 CEST	49777	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.001597881 CEST	443	49777	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.004786015 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.004805088 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.004878044 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.005019903 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.005033970 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.008531094 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.008682966 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.008863926 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.008865118 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.008919001 CEST	49776	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.008933067 CEST	443	49776	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.010792971 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.010814905 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.010987043 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.011110067 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.011122942 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.137860060 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.138451099 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.138462067 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.138842106 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.138845921 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.200742006 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.201205015 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.201221943 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.201692104 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.201699018 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.236556053 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.236623049 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.236681938 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.236871958 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.236871958 CEST	49778	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.236896992 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.236906052 CEST	443	49778	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.239995003 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.240031004 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.240236044 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.240386963 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.240401030 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.304706097 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.304761887 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.304933071 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.304974079 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.304987907 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.305001974 CEST	49779	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.305008888 CEST	443	49779	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.307506084 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.307540894 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.307605982 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.307748079 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.307753086 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.360704899 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:37.407402039 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608786106 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608808041 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608812094 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608829021 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608865976 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608876944 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:37.608894110 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.608921051 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:37.608939886 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:37.609307051 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.609369040 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:37.609376907 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.610044956 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:37.610104084 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:37.614825964 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.615258932 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.615269899 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.615930080 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.615933895 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.626276016 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.627291918 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.627300024 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.627749920 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.627753973 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.630036116 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.630342007 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.630356073 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.630673885 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.630680084 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.712102890 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.712179899 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.712348938 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.712364912 CEST	49782	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.712373018 CEST	443	49782	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.715162992 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.715189934 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.715265036 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.715492010 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.715501070 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.725064993 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.725213051 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.725369930 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.725497961 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.725509882 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.725518942 CEST	49783	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.725523949 CEST	443	49783	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.727556944 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.727581978 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.727642059 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.727706909 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.727801085 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.727833033 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.727840900 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.727858067 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.727943897 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.727943897 CEST	49781	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.727952957 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.727961063 CEST	443	49781	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.729873896 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.729883909 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.730092049 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.730092049 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.730108023 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.890827894 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.891587019 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.891606092 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.892010927 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.892035961 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.937937975 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.938440084 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.938451052 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.938905001 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.938910961 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.992343903 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.992397070 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.992562056 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.992608070 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.992608070 CEST	49784	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.992621899 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.992630005 CEST	443	49784	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.995435953 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.995467901 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:37.995539904 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.995712996 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:37.995729923 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.034147978 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.034215927 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.034384012 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.034405947 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.034416914 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.034429073 CEST	49785	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.034434080 CEST	443	49785	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.037163973 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.037187099 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.037256956 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.037377119 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.037389040 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.215774059 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:38.215801001 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:38.215833902 CEST	49773	443	192.168.2.7	52.149.20.212
Oct 7, 2024 16:48:38.215847015 CEST	443	49773	52.149.20.212	192.168.2.7
Oct 7, 2024 16:48:38.321692944 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.322185040 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.322211027 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.324402094 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.324408054 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.342483997 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.344968081 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.344988108 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.345837116 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.345844984 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.376321077 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.376996040 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.377007008 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.377525091 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.377531052 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.416786909 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.416846991 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.416899920 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.417052031 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.417072058 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.417082071 CEST	49788	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.417088985 CEST	443	49788	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.420558929 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.420598984 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.420666933 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.420914888 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.420934916 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.438132048 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.438309908 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.438451052 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.438451052 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.438451052 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.441641092 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.441673040 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.441747904 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.441891909 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.441909075 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.478482008 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.478647947 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.478725910 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.478785992 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.478797913 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.478844881 CEST	49790	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.478851080 CEST	443	49790	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.481070995 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.481121063 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.481199980 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.481357098 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.481374979 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.603315115 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.604049921 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.604065895 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.604523897 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.604528904 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.678350925 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.681147099 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.681173086 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.681895971 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.681900978 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.727742910 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.727807999 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.727890015 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.728043079 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.728059053 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.728070021 CEST	49791	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.728075981 CEST	443	49791	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.731004953 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.731034040 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.731096983 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.731319904 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.731328964 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.738414049 CEST	49789	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.738429070 CEST	443	49789	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.778681040 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.778851986 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.778947115 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.778983116 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.778983116 CEST	49792	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.779000998 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.779015064 CEST	443	49792	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.781671047 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.781718016 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:38.781939983 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.782222033 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:38.782242060 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.080495119 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.081001043 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.081021070 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.081443071 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.081448078 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.087687969 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.088095903 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.088110924 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.088576078 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.088581085 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.118700027 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.119127989 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.119142056 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.119554043 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.119560957 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.177659035 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.177809000 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.177872896 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.178018093 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.178031921 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.178045034 CEST	49794	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.178050995 CEST	443	49794	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.180912018 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.180936098 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.181077003 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.181199074 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.181204081 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.190901041 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.190964937 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.191014051 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.191433907 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.191442013 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.191447020 CEST	49793	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.191451073 CEST	443	49793	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.193994045 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.194015980 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.194142103 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.194226980 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.194235086 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.219250917 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.219425917 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.219489098 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.219516993 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.219532013 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.219541073 CEST	49795	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.219547033 CEST	443	49795	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.221851110 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.221867085 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.222309113 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.222309113 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.222341061 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.355052948 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.355736017 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.355750084 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.356125116 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.356131077 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.426004887 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.426459074 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.426475048 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.426862955 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.426870108 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.458034039 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.458096981 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.458252907 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.458314896 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.458314896 CEST	49796	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.458328009 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.458334923 CEST	443	49796	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.460858107 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.460881948 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.460947990 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.461112976 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.461123943 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.523933887 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.524066925 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.524130106 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.524220943 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.524238110 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.524249077 CEST	49797	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.524254084 CEST	443	49797	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.526823044 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.526839018 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.527029991 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.527170897 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.527179003 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.792587996 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.793067932 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.793087006 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.793505907 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.793510914 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.809422016 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.809854031 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.809869051 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.810224056 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.810229063 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.864252090 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.864850044 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.864872932 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.865277052 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.865282059 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.887729883 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.887892008 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.887955904 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.887983084 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.887990952 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.888004065 CEST	49798	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.888010025 CEST	443	49798	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.890398979 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.890428066 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.890604973 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.890754938 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.890774965 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.905611992 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.905630112 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.905721903 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.905731916 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.905812025 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.905885935 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.905885935 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.905953884 CEST	49799	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.905970097 CEST	443	49799	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.908716917 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.908756971 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.909022093 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.909156084 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.909178019 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.967586040 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.967660904 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.967739105 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.967901945 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.967911959 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.967983961 CEST	49800	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.967991114 CEST	443	49800	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.970594883 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.970640898 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:39.970813036 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.971041918 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:39.971055031 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.094403028 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.094979048 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.094994068 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.095427990 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.095432997 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.131716967 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.132145882 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.132163048 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.132567883 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.132571936 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.193677902 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.193741083 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.193828106 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.193983078 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.193983078 CEST	49801	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.194013119 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.194025993 CEST	443	49801	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.196609020 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.196626902 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.196696043 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.196897984 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.196911097 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.226893902 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.226923943 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.226986885 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.227042913 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.227173090 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.227185965 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.227197886 CEST	49802	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.227205038 CEST	443	49802	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.229676008 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.229716063 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.229784012 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.229899883 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.229921103 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.502171040 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.502664089 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.502681017 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.503098011 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.503110886 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.515675068 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.516344070 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.516381025 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.516844988 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.516854048 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.597754002 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.597820997 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.598189116 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.598207951 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.598340034 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.598361015 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.598392010 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.598392010 CEST	49803	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.598400116 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.598458052 CEST	443	49803	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.601739883 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.601773024 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.602006912 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.602103949 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.602116108 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.603678942 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.604326963 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.604341030 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.604855061 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.604860067 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.610991001 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.611008883 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.611090899 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.611104965 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.611294985 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.611294985 CEST	49804	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.611305952 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.611315012 CEST	443	49804	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.619651079 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.619679928 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.619755983 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.619887114 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.619901896 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.704040051 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.704119921 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.704271078 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.704467058 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.704467058 CEST	49805	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.704484940 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.704493046 CEST	443	49805	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.706773996 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.706799030 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.706948996 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.707065105 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.707079887 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.835140944 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.835706949 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.835735083 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.836358070 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.836364031 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.849199057 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.849591970 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.849627972 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.849947929 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.849957943 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.949126005 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.949368000 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.949428082 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.949481010 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.949481010 CEST	49807	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.949506044 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.949522972 CEST	443	49807	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.951803923 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.951836109 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.952095032 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.952239037 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.952243090 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.965395927 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.966077089 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.966417074 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.966417074 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.966417074 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.968852997 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.968904018 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:40.970655918 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.976855993 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:40.976885080 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.224292994 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.224752903 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.224766016 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.225217104 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.225220919 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.248661995 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.249253035 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.249281883 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.249603987 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.249614954 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.265980005 CEST	49806	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.265997887 CEST	443	49806	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.347639084 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.348165035 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.348176956 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.348649025 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.348654032 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.349857092 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.350189924 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.350263119 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.350301027 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.350301027 CEST	49808	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.350316048 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.350326061 CEST	443	49808	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.353173971 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.353198051 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.354764938 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.355092049 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.355117083 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.369901896 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.370337009 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.370400906 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.370450020 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.370465994 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.370476007 CEST	49809	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.370481014 CEST	443	49809	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.372939110 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.372967005 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.373145103 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.373280048 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.373291969 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.448102951 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.448518991 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.448663950 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.448743105 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.448754072 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.448766947 CEST	49810	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.448771954 CEST	443	49810	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.451200962 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.451241970 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.451347113 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.451472998 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.451493979 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.595753908 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.596270084 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.596278906 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.596746922 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.596761942 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.629703045 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.630168915 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.630182028 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.630672932 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.630677938 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.687812090 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 7, 2024 16:48:41.695755959 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.695852995 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.696013927 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.696041107 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.696063995 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.696086884 CEST	49811	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.696094036 CEST	443	49811	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.698637009 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.698662043 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.698756933 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.698976994 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.698997021 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.735766888 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.735908985 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.735981941 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.736191034 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.736202002 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.736244917 CEST	49812	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.736249924 CEST	443	49812	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.738970041 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.739029884 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.739206076 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.739398956 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.739417076 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.971528053 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.972575903 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.972601891 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:41.973098993 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:41.973104000 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.015165091 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.015649080 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.015661001 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.016213894 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.016221046 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.064979076 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.065490007 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.065500975 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.065947056 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.065952063 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.067302942 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.067768097 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.067837000 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.068017006 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.068034887 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.068043947 CEST	49813	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.068051100 CEST	443	49813	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.070647001 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.070692062 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.070766926 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.070883989 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.070902109 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.112375975 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.112793922 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.112862110 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.112901926 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.112920046 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.112930059 CEST	49814	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.112936020 CEST	443	49814	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.115405083 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.115438938 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.115591049 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.115683079 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.115695953 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.277935028 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.278023005 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.278086901 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.278321028 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.278336048 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.278362036 CEST	49815	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.278368950 CEST	443	49815	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.281032085 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.281065941 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.281177044 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.281286001 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.281301975 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.334331989 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.334814072 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.334826946 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.335407019 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.335412025 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.353565931 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.354074955 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.354104996 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.354540110 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.354547024 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.434344053 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.434479952 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.434518099 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.434541941 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.434591055 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.434735060 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.434747934 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.434762001 CEST	49816	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.434767008 CEST	443	49816	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.438261032 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.438288927 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.438416958 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.438564062 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.438579082 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.448234081 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.448524952 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.448693037 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.448693991 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.448693991 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.450736046 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.450759888 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.450881004 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.451029062 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.451044083 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.692442894 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.696098089 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.696134090 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.696630955 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.696640968 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.730648041 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.731120110 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.731136084 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.731564999 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.731570005 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.750452042 CEST	49817	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.750524998 CEST	443	49817	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.848639011 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.848944902 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.849071980 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.849143982 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.849143982 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.849250078 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.849250078 CEST	49818	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.849298954 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.849333048 CEST	443	49818	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.851882935 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.851927996 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.852083921 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.852262974 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.852278948 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.873519897 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.873733044 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.873902082 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.873939037 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.873950005 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.873960018 CEST	49819	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.873965025 CEST	443	49819	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.876214981 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.876247883 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.876409054 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.876533031 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.876545906 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.964533091 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.965255976 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.965290070 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:42.965687990 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:42.965692997 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.062391996 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.062969923 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.062990904 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.063363075 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.063370943 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.070224047 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.070331097 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.070548058 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.070591927 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.070611954 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.070622921 CEST	49820	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.070628881 CEST	443	49820	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.073373079 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.073405981 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.073472977 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.073653936 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.073671103 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.082638025 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.083004951 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.083020926 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.083518982 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.083534956 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.160972118 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.161156893 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.161317110 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.161561966 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.161561966 CEST	49821	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.161577940 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.161587000 CEST	443	49821	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.164741993 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.164772987 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.164836884 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.165169954 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.165185928 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.179544926 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.179908991 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.180013895 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.180085897 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.180085897 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.180154085 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.180155039 CEST	49822	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.180166960 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.180176973 CEST	443	49822	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.182204008 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.182248116 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.182403088 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.182531118 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.182545900 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.476512909 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.477029085 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.477046967 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.477528095 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.477531910 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.512686014 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.513207912 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.513221979 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.513669968 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.513674974 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.584103107 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.584172010 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.584350109 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.584438086 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.584450006 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.584460974 CEST	49823	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.584465981 CEST	443	49823	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.587225914 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.587270975 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.587423086 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.587588072 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.587609053 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.613620996 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.613858938 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.613951921 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.614006042 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.614016056 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.614027023 CEST	49824	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.614032030 CEST	443	49824	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.616677046 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.616728067 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.616842031 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.616982937 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.617008924 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.716186047 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.716727018 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.716753006 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.717369080 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.717380047 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.813630104 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.814446926 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.814471006 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.814769030 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.814775944 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.815676928 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.815746069 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.815975904 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.815975904 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.815975904 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.818959951 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.819034100 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.819149971 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.819318056 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.819350004 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.915091038 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.915117979 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.915162086 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.915205956 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.915205956 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.915452003 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.915466070 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.915477037 CEST	49826	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.915482998 CEST	443	49826	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.918529034 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.918570995 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:43.918845892 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.919028997 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:43.919040918 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.125406981 CEST	49825	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.125422955 CEST	443	49825	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.201702118 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.202312946 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.202323914 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.202778101 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.202781916 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.242120981 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.242753983 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.242786884 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.243160963 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.243172884 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.296113014 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.296247959 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.296295881 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.296359062 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.296391964 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.296638012 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.296638012 CEST	49828	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.296648979 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.296657085 CEST	443	49828	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.299523115 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.299566031 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.299649954 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.299809933 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.299825907 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.341588020 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.342150927 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.342264891 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.342427015 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.342467070 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.342494965 CEST	49829	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.342511892 CEST	443	49829	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.345155001 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.345185041 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.345252037 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.345369101 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.345381975 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.430594921 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.431129932 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.431171894 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.431680918 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.431695938 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.526473999 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.527007103 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.527112007 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.527148008 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.527165890 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.527179956 CEST	49830	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.527188063 CEST	443	49830	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.529632092 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.529659986 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.529776096 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.529920101 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.529932022 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.596894979 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.597996950 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.598018885 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.598236084 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.598253965 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.697525024 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.697843075 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.697912931 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.697948933 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.697948933 CEST	49831	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.697969913 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.697982073 CEST	443	49831	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.700433969 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.700469017 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:44.700552940 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.700710058 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:44.700726032 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.197207928 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.197582960 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.197835922 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.197855949 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.198046923 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.198076010 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.198276043 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.198282003 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.198401928 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.198410988 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.297962904 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.298763037 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.298804998 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.298815012 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.298845053 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.298877001 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.298932076 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.298945904 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.298955917 CEST	49832	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.298960924 CEST	443	49832	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.299698114 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.299804926 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.299804926 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.299849033 CEST	49833	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.299869061 CEST	443	49833	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.301628113 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.301662922 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.301743984 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.302274942 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.302289963 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.302406073 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.302432060 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.302493095 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.303375006 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.303391933 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.376831055 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.377319098 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.377341032 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.377757072 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.377762079 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.380131006 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.380534887 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.380569935 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.380903959 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.380924940 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.476075888 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.476274967 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.476346016 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.476445913 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.476469994 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.476481915 CEST	49834	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.476489067 CEST	443	49834	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.477845907 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.478002071 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.478060007 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.478089094 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.478106022 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.478116035 CEST	49835	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.478121996 CEST	443	49835	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.479228973 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.479266882 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.479324102 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.479491949 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.479505062 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.480088949 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.480120897 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.480220079 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.480308056 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.480324030 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.930222034 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.930774927 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.930790901 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.931180000 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.931185007 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.937320948 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.938811064 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.938826084 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:45.939268112 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:45.939273119 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.038783073 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.039278030 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.039330006 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.039402008 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.039402008 CEST	49836	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.039414883 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.039422035 CEST	443	49836	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.041975021 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.042023897 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.042103052 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.042222977 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.042243004 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.064184904 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.064492941 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.064531088 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.064532042 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.064583063 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.064616919 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.064630985 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.064649105 CEST	49837	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.064656019 CEST	443	49837	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.070764065 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.070791006 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.070904016 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.071058989 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.071073055 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.099658012 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.100168943 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.100178003 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.100732088 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.100737095 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.118110895 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.118609905 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.118637085 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.119087934 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.119092941 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.138248920 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.138709068 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.138726950 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.139158010 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.139163017 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.199381113 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.199960947 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.200038910 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.211731911 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.211749077 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.211757898 CEST	49838	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.211762905 CEST	443	49838	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.220326900 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.220361948 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.220535994 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.220634937 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.220642090 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.239001989 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.239504099 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.239563942 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.239902020 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.239923954 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.239936113 CEST	49839	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.239942074 CEST	443	49839	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.243969917 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.244019032 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.244131088 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.245657921 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.245680094 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.511442900 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.511606932 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.511662960 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.511697054 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.511714935 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.511742115 CEST	49827	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.511746883 CEST	443	49827	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.514852047 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.514885902 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.515126944 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.515151978 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.515156031 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.708931923 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.709016085 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.709490061 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.709513903 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.709589005 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.709609032 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.709938049 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.709944963 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.710917950 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.710927010 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.806160927 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.806241989 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.806339025 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.806600094 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.806987047 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.807054043 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.807073116 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.807104111 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.807157993 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.807503939 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.807513952 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.807550907 CEST	49841	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.807559013 CEST	443	49841	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.808427095 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.808443069 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.808478117 CEST	49840	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.808485985 CEST	443	49840	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.811281919 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.811326027 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.811403036 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.811503887 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.811510086 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.811597109 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.811606884 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.811669111 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.811744928 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.811757088 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.856666088 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.857145071 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.857170105 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.858673096 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.858681917 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.869692087 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.870177031 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.870198965 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.870569944 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.870577097 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.964016914 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.964171886 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.964376926 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.964844942 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.964873075 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.964900017 CEST	49842	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.964914083 CEST	443	49842	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.971795082 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.971828938 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.971915007 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.972516060 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:46.972531080 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.972696066 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.972856998 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:46.972922087 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.001116037 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.001137972 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.001156092 CEST	49843	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.001163960 CEST	443	49843	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.008554935 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.008601904 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.008711100 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.009634018 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.009649992 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.256362915 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.306622028 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.415823936 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.415831089 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.416323900 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.416328907 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.583246946 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.583379030 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.583426952 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.583460093 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.583512068 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.583563089 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.653028011 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.654611111 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.660501957 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.660969019 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.660981894 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.661032915 CEST	49844	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.661040068 CEST	443	49844	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.697356939 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.697359085 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.712877989 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.873533964 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.873559952 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.873960972 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.873966932 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.874155998 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.874193907 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.874474049 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.874479055 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.874641895 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.874654055 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.875119925 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.875124931 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.944713116 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.944755077 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.944817066 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.965722084 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.965826035 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.965917110 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.966171980 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.966717958 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.966773987 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.966790915 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.966845036 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.966891050 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.970194101 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.970472097 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.970520973 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.974003077 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.974029064 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.974898100 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.974898100 CEST	49847	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.974917889 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.974926949 CEST	443	49847	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.976473093 CEST	49845	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.976488113 CEST	443	49845	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.977802992 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.977807045 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:47.977817059 CEST	49846	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:47.977822065 CEST	443	49846	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.191250086 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.191312075 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.191390991 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.193770885 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.193815947 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.193921089 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.210721016 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.210746050 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.211513042 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.211549997 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.211610079 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.211720943 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.211729050 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.211750031 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.211766005 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.451950073 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.494131088 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.500030994 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.500047922 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.500422001 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.500427961 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.502394915 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.502424955 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.502522945 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.503616095 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.503628969 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.594660997 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.594727039 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.594832897 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.594928980 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.594928980 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.631541967 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.631541967 CEST	49848	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.631560087 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.631567001 CEST	443	49848	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.636089087 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.679409981 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.685003042 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.685018063 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.685451031 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.685457945 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.687350035 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.687412024 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.687577009 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.687654018 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.687663078 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.777921915 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.778008938 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.778177023 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.778237104 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.778256893 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.778280020 CEST	49849	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.778287888 CEST	443	49849	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.781294107 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.781325102 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.781608105 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.781608105 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:48.781651974 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:48.959974051 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.960499048 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.960509062 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.962188959 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.962361097 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.964348078 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.964348078 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.964436054 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.964672089 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.964755058 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.964765072 CEST	443	49855	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.964771986 CEST	49855	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.965135098 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.965189934 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:48.965261936 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.965437889 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:48.965455055 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.060894012 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.061718941 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.061753988 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.062244892 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.062251091 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.071083069 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.071590900 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.071604013 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.071926117 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.071933031 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.104605913 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.105114937 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.105127096 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.105516911 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.105521917 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.156361103 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.156415939 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.156461954 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.156470060 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.156522036 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.156709909 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.156729937 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.156743050 CEST	49852	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.156752110 CEST	443	49852	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.159910917 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.159940004 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.160007954 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.160183907 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.160197020 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.167998075 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.168150902 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.168203115 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.168268919 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.168268919 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.168307066 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.168329000 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.168343067 CEST	49850	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.168350935 CEST	443	49850	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.170454025 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.170499086 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.170567989 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.170731068 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.170746088 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.205429077 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.206096888 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.206159115 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.206190109 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.206213951 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.206228018 CEST	49851	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.206235886 CEST	443	49851	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.210856915 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.210906029 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.211007118 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.211122990 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.211141109 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.340158939 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.340893984 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.340919971 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.341134071 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.341141939 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.416656971 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.417020082 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.417033911 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.418716908 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.418788910 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.419754028 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.419838905 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.420097113 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.420111895 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.431536913 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.432003975 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.432028055 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.432401896 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.432410002 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.473175049 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.533229113 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.533387899 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.533453941 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.533622026 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.533622026 CEST	49858	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.533634901 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.533638954 CEST	443	49858	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.536583900 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.536619902 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.536681890 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.536823988 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.536835909 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.708733082 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.708900928 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.708959103 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.709348917 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.709348917 CEST	49857	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.709364891 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.709373951 CEST	443	49857	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.712925911 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.712996960 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.713073015 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.713213921 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.713222027 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.720858097 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.721007109 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.721059084 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.721069098 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.721164942 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.721220970 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.721226931 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.721477985 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.721532106 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.722218990 CEST	49859	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.722232103 CEST	443	49859	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.743268013 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.743303061 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.743360996 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.743892908 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.743906975 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.745150089 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.745161057 CEST	443	49866	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.745213985 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.745688915 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.745704889 CEST	443	49866	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.746162891 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.746205091 CEST	443	49867	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.746262074 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.746654034 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:49.746673107 CEST	443	49867	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:49.753709078 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:49.753731966 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:49.753803015 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:49.754007101 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:49.754018068 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:49.777260065 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.777731895 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.777759075 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:49.778139114 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:49.778146982 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.058124065 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.058192015 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.058262110 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.058289051 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.058310986 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.058362961 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.058592081 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.058604956 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.058620930 CEST	49861	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.058626890 CEST	443	49861	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.059124947 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.059658051 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.059674025 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.060151100 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.060156107 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.061902046 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.061948061 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.062031984 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.062186003 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.062200069 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.163369894 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.163455963 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.163602114 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.165220976 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.165236950 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.165251017 CEST	49862	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.165256977 CEST	443	49862	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.167886019 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.167932987 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.168009043 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.168193102 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.168205023 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.200155973 CEST	443	49867	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.200640917 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.200656891 CEST	443	49867	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.202390909 CEST	443	49867	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.202462912 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.202780008 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.202780008 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.202858925 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.202858925 CEST	443	49867	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.202914000 CEST	49867	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.203175068 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.203203917 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.203295946 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.203464985 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.203480959 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.210238934 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.212579966 CEST	443	49866	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.214294910 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.214307070 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.214413881 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.214420080 CEST	443	49866	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.215734959 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.215801954 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.215864897 CEST	443	49866	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.215913057 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216129065 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216141939 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216185093 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216207981 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.216408968 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216425896 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216428041 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.216428995 CEST	443	49865	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.216492891 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216494083 CEST	49865	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216700077 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216716051 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.216928959 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216960907 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.216960907 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.217006922 CEST	443	49866	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.217152119 CEST	49866	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.217170954 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.217191935 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.220491886 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.221322060 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.221333027 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.249195099 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.252867937 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.252887964 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.253330946 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.253335953 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.326977968 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.328798056 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.328840971 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.329181910 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.329189062 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.349574089 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.350636959 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.350742102 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.350791931 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.350811005 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.383717060 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.413532019 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.413556099 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.413589954 CEST	49863	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.413597107 CEST	443	49863	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.413984060 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.413992882 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.414460897 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.414524078 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.415137053 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.415196896 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.421601057 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.421688080 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.421777964 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.516288996 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.516479015 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.516630888 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.517285109 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.517317057 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.517355919 CEST	49864	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.517365932 CEST	443	49864	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.529035091 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.529058933 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.529130936 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.542259932 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.542295933 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.542437077 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.542449951 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.542490959 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.542557955 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.542568922 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.559401035 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.567970037 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.567980051 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.617743015 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.652518034 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.652825117 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.652841091 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.654254913 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.654421091 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.654664040 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.654747009 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.654786110 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.679615974 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.680304050 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.680329084 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.680735111 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.680740118 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.684894085 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.685148001 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.685163975 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.685745001 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.685905933 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.685916901 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.687349081 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.687422991 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.687721014 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.687800884 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.687882900 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.688682079 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.688741922 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.688992023 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.689069986 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.689078093 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.689163923 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.695440054 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.696564913 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.696588039 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.724212885 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.724257946 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.724303007 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.724344969 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.724435091 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.724453926 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.724457026 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.729813099 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.729871988 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.729881048 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.731403112 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.736185074 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.736244917 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.736253023 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.741717100 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.741772890 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.741779089 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.742472887 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.742489100 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.742496967 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.742505074 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.742825985 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.747941971 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.747996092 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.748002052 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.754147053 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.754196882 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.754203081 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.777204037 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.777637005 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.778147936 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.778162003 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.778552055 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.778557062 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.778630972 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.778696060 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.778767109 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.778783083 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.778793097 CEST	49869	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.778798103 CEST	443	49869	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.781172037 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.781217098 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.781303883 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.781414032 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.781430960 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.788984060 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.791049957 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.804240942 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.816181898 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.816308022 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.816335917 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.816385031 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.816394091 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.816909075 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.818806887 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.820158958 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.820293903 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.820456982 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.820967913 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.820998907 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.821012974 CEST	49872	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.821032047 CEST	443	49872	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.821034908 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.821042061 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.821084023 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.823987961 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.824047089 CEST	443	49878	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.824440002 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.824736118 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.824758053 CEST	443	49878	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.826771975 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.833261967 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.833323956 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.833332062 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.838799000 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.838829041 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.838896036 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.838910103 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.838954926 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.844778061 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.844811916 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.844846010 CEST	443	49879	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.845140934 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.845633984 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.845654011 CEST	443	49879	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.850840092 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.850903988 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.850913048 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.856858015 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.856939077 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.856947899 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.861939907 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.861975908 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.862010956 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.862020016 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.862067938 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.867166996 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.872729063 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.872807980 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.872813940 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.875184059 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.875972033 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.876054049 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.876095057 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.876095057 CEST	49870	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.876115084 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.876125097 CEST	443	49870	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.878190994 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.878262043 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.878268003 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.878930092 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.878956079 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.879028082 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.879156113 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:50.879168034 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:50.883687019 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.883764982 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.883771896 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.904798031 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.904828072 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.904856920 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.904869080 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.904906988 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.904949903 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.905210972 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.905250072 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.905265093 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.905271053 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.905316114 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.905320883 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.907547951 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.907613993 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.907627106 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.912489891 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.912552118 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.912559986 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.916737080 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.916805029 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.916812897 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.920376062 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.920433998 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.920440912 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.924336910 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.924406052 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.924412966 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.928409100 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.928459883 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.928472042 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.932790995 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.932858944 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.932882071 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.936141014 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.936202049 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.936216116 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.940300941 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.940371037 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.940504074 CEST	49868	443	192.168.2.7	172.217.18.14
Oct 7, 2024 16:48:50.940527916 CEST	443	49868	172.217.18.14	192.168.2.7
Oct 7, 2024 16:48:50.960932970 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:50.960985899 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:50.961050034 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:50.961467028 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:50.961484909 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:50.983633995 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.983789921 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.983866930 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.983891010 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.983926058 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:50.984064102 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.984704018 CEST	49871	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:50.984715939 CEST	443	49871	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034678936 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034739017 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034773111 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034792900 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.034800053 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034872055 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034889936 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.034895897 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034956932 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.034961939 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.034986973 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.035056114 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.036535025 CEST	49873	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.036546946 CEST	443	49873	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.055214882 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.055257082 CEST	443	49884	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:51.055315018 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.055571079 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:51.055578947 CEST	443	49884	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.128922939 CEST	443	49879	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.129237890 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.129251957 CEST	443	49879	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.130908966 CEST	443	49879	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.130976915 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.131601095 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.131709099 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.131722927 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.131758928 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.131831884 CEST	443	49879	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.131851912 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.131896973 CEST	49879	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.132113934 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.132139921 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.132206917 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.132320881 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.132328987 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.132337093 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.132345915 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.132741928 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.132746935 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.132746935 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.132760048 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.132870913 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.132947922 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.133121967 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.133466959 CEST	443	49878	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.133508921 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.133522987 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.133754015 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.133764982 CEST	443	49878	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.133795023 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.133861065 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.134310961 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.134394884 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.134516954 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.134533882 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.134670019 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.134675026 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.135169029 CEST	443	49878	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.135232925 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.135499001 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.135509968 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.135545015 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.135574102 CEST	443	49878	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.135637045 CEST	49878	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.135849953 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.135862112 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.135931969 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.136115074 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.136128902 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.180463076 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.228938103 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.229456902 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.229509115 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.229526997 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.229566097 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.229609013 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.229625940 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.229635954 CEST	49874	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.229640961 CEST	443	49874	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.230408907 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.230573893 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.230635881 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.230654001 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.230667114 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.230675936 CEST	49875	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.230680943 CEST	443	49875	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.232182026 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.232223988 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.232342005 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.232342005 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.232372999 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.232455969 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.232542038 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.232554913 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.232583046 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.232593060 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.305824995 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.306823015 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.306823015 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.306845903 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.306855917 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.308079958 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.308362007 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.308391094 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.308682919 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.308689117 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.319571018 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.319941044 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.319966078 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.320343018 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.320348024 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.401485920 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.402260065 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.402307987 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.402312994 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.402362108 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.402400017 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.402412891 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.402419090 CEST	49876	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.402422905 CEST	443	49876	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.404346943 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.404643059 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.404706955 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.404769897 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.404792070 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.404838085 CEST	49880	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.404844046 CEST	443	49880	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.405169010 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.405231953 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.405320883 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.405440092 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.405476093 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.406728983 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.406757116 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.406805038 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.406820059 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.406860113 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.406899929 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.406919956 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.407083988 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.407128096 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.407143116 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.407659054 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.407684088 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.412671089 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.412724972 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.412746906 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.418530941 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.418596029 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.418617964 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.424621105 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.424680948 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.424705029 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.430514097 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.430583954 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.430608034 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.436352015 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.436415911 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.436443090 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.442523003 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.443021059 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.443077087 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.443123102 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.443136930 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.443171978 CEST	49860	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.443177938 CEST	443	49860	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.445461988 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.445488930 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.445591927 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.445707083 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.445719004 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.483263016 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.493201971 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.493274927 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.493334055 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.493359089 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.497248888 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.497282982 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.497314930 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.497340918 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.497407913 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.503118992 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.509207010 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.509226084 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.509294987 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.509315968 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.509383917 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.514962912 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.515023947 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.515074015 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.515093088 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.520987034 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.521049023 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.521065950 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.526989937 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.527049065 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.527065039 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.532987118 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.533054113 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.533071995 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.538187027 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.538255930 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.538274050 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.543697119 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.543762922 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.543777943 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.544763088 CEST	443	49884	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.544966936 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.544986010 CEST	443	49884	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.548605919 CEST	443	49884	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.548681021 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.548973083 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.548986912 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.549024105 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.549137115 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.549149990 CEST	443	49884	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.549190998 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.549206972 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.549207926 CEST	49884	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.549305916 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.549339056 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.549397945 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.549623013 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.549633980 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.554637909 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.554717064 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.554734945 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.560158014 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.560224056 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.560239077 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.584300995 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.584331036 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.584372044 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.584374905 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.584419012 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.584444046 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.585849047 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.585900068 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.585910082 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.585977077 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.586018085 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.586028099 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.587892056 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.587928057 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.587960958 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.587970018 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.588013887 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.588339090 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.588608027 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.588617086 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.589621067 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.589687109 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.589709997 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.589955091 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.590018988 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.590178013 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.590187073 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.593621016 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.593671083 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.593686104 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.597583055 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.597614050 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.597637892 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.597671986 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.597726107 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.600195885 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.600465059 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.600496054 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.600961924 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.601231098 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.601320982 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.601356983 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.601469994 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.605258942 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.605304003 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.605309010 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.605319023 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.605360031 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.609168053 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.612904072 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.612960100 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.612982988 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.616930962 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.617005110 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.617016077 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.617088079 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.617137909 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.617233038 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.617252111 CEST	443	49881	142.250.185.110	192.168.2.7
Oct 7, 2024 16:48:52.617258072 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.617404938 CEST	49881	443	192.168.2.7	142.250.185.110
Oct 7, 2024 16:48:52.635370970 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.643405914 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.651098967 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.706654072 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.706773996 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.706825972 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.712479115 CEST	49885	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.712496996 CEST	443	49885	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.852377892 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.868257046 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.877171040 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.877187014 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.878217936 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.878222942 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.879781961 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.879802942 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.880150080 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.880153894 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.936726093 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.936871052 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:52.936940908 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:52.969667912 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.970204115 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:52.970371008 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:52.992679119 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.009205103 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.009980917 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.010067940 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.024125099 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.024168968 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.024179935 CEST	49888	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.024185896 CEST	443	49888	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.026227951 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.028305054 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.035151958 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.057320118 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.065391064 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.065437078 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.065825939 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.065840006 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.066271067 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.066284895 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.066647053 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.066658974 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.067445040 CEST	49887	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.067464113 CEST	443	49887	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.067903996 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.067915916 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.068423033 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.068456888 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.068944931 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.068952084 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.071173906 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.071202040 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.071269989 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.071324110 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.071352005 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.071404934 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.071517944 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.071533918 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.071836948 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.071901083 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.072659969 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.072727919 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.072927952 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.072935104 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.073215008 CEST	49886	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.073236942 CEST	443	49886	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.074944973 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.074954987 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.075404882 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.075416088 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.075480938 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.075634956 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.075644016 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.086477995 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.086502075 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.086555004 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.088809013 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.088824034 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.091470003 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.091497898 CEST	443	49900	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.091556072 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.091850996 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.091869116 CEST	443	49900	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.120827913 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.124165058 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.124191999 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.124249935 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.124444962 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.124459982 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.354193926 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354255915 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354320049 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354326963 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354394913 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354454994 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354479074 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354536057 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354648113 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354648113 CEST	49891	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354667902 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354676008 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354676008 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354684114 CEST	443	49891	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354676008 CEST	49889	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.354734898 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.354751110 CEST	443	49889	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.355273008 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.355281115 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.355326891 CEST	49890	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.355335951 CEST	443	49890	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.357779980 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.357812881 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.357893944 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.357961893 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.357992887 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.358055115 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.358067989 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.358084917 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.358170033 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.358181953 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.358453035 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.358494043 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.358573914 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.358721972 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.358735085 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.358984947 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359154940 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359213114 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.359222889 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359307051 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359354973 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.359359980 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359558105 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359611034 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.359616995 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359697104 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.359741926 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.359921932 CEST	49892	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.359935999 CEST	443	49892	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.536329031 CEST	443	49900	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.536739111 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.536756039 CEST	443	49900	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.537178993 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.537347078 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.537357092 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.538184881 CEST	443	49900	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.538259983 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.538733959 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.538752079 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.538790941 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.538791895 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.538820982 CEST	443	49900	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.538925886 CEST	49900	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.539108992 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.539108992 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.539140940 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.539244890 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.539747000 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.539758921 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.540353060 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.540438890 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.540611982 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.540618896 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.558953047 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.559525013 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.559545040 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.560529947 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.560612917 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.561748981 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.561819077 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.561893940 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.561902046 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.585323095 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.610879898 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.662128925 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.662436962 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.662440062 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.662455082 CEST	443	49898	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.662540913 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.662540913 CEST	49898	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.663077116 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.663117886 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.663207054 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.663408995 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:53.663439035 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:53.689595938 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.690294981 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.690316916 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.690548897 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.690844059 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.690859079 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.691626072 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.691652060 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.692292929 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.692300081 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.701410055 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.701505899 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.701574087 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.703504086 CEST	49899	443	192.168.2.7	104.26.12.205
Oct 7, 2024 16:48:53.703525066 CEST	443	49899	104.26.12.205	192.168.2.7
Oct 7, 2024 16:48:53.729568005 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.735743046 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.735765934 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.737051964 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.737133980 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.738477945 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.738544941 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.751609087 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:53.751661062 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:53.751730919 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:53.751928091 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:53.751939058 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:53.784528017 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.784826994 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.784900904 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.784914970 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.784940004 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.785012007 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.785079956 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.785108089 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.785232067 CEST	49897	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.785238981 CEST	443	49897	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.787513018 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.787549019 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.787707090 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.787928104 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.787936926 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:48:53.787938118 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.787950993 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.787965059 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.788408995 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.788455963 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.788990974 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.789010048 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.789024115 CEST	49896	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.789031982 CEST	443	49896	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.790941000 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.790954113 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.791017056 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.791106939 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.791116953 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.834842920 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:48:53.966753960 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.967196941 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.967215061 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.967856884 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.967863083 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.970504045 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.970865011 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.970887899 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.971262932 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.971270084 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.978496075 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.979171038 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.979182005 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.980017900 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.980163097 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.980225086 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.980370045 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.980391979 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.980545998 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.980606079 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:53.980716944 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:53.980725050 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:53.980818033 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:53.980825901 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:54.022373915 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:54.062468052 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.062540054 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.062592030 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.062834978 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.062853098 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.062863111 CEST	49903	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.062869072 CEST	443	49903	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.066709995 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.067559958 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.067630053 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.068849087 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.068892956 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.068950891 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.068950891 CEST	49904	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.068960905 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.068969011 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.068979979 CEST	443	49904	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.070414066 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.070430994 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.077143908 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.077183962 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.077245951 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.077389956 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.077403069 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.078027010 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.078274965 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.078351974 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.078387976 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.078406096 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.078418970 CEST	49905	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.078427076 CEST	443	49905	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.080351114 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.080390930 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.080455065 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.080560923 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.080578089 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.098268986 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.098794937 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:54.098808050 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.099152088 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.099426031 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:54.099490881 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.099540949 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:54.143404961 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.147336960 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:54.217106104 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.217436075 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.217453957 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.218920946 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.219017982 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.219317913 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.219413042 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.219455957 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.223429918 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.223707914 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:54.223767042 CEST	443	49907	35.190.80.1	192.168.2.7
Oct 7, 2024 16:48:54.223854065 CEST	49907	443	192.168.2.7	35.190.80.1
Oct 7, 2024 16:48:54.263407946 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.272306919 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.272324085 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.312541008 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:54.312725067 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:54.312959909 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:54.313211918 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:54.313211918 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:54.313234091 CEST	443	49906	172.67.200.174	192.168.2.7
Oct 7, 2024 16:48:54.313350916 CEST	49906	443	192.168.2.7	172.67.200.174
Oct 7, 2024 16:48:54.319184065 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.322654009 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.322678089 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.322945118 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.322945118 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.322973967 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.347101927 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.347166061 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.347224951 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.347799063 CEST	49908	443	192.168.2.7	172.67.74.152
Oct 7, 2024 16:48:54.347811937 CEST	443	49908	172.67.74.152	192.168.2.7
Oct 7, 2024 16:48:54.399585009 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.400258064 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.400280952 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.400671959 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.400676966 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.427593946 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.428118944 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.428139925 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.428528070 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.428543091 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.495402098 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.495892048 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.495944977 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.496017933 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.496017933 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.496088982 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.496089935 CEST	49910	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.496104956 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.496113062 CEST	443	49910	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.498816967 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.498855114 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.498941898 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.499138117 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.499154091 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.525516987 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.525568008 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.525758982 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.525768042 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.525861025 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.525861025 CEST	49909	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.525866985 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.525934935 CEST	443	49909	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.528037071 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.528059959 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.528132915 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.528266907 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.528279066 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.687237024 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.687971115 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.687994957 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.688601017 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.688606977 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.708250999 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.708583117 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.708600998 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.709063053 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.709070921 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.769943953 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.770507097 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.770539999 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.771106958 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.771112919 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.782984018 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.783181906 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.783243895 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.783277035 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.783298016 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.783309937 CEST	49912	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.783318043 CEST	443	49912	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.786461115 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.786497116 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.786648035 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.786756039 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.786777973 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.822978020 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.823406935 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.823414087 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.824464083 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.824534893 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.825679064 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.825741053 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.825880051 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.825885057 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:54.866128922 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:54.872750044 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.872766972 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.872806072 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.872837067 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.872864962 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.873090029 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.873109102 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.873157978 CEST	49913	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.873166084 CEST	443	49913	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.876228094 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.876260996 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.876388073 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.876640081 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.876655102 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.900712013 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.900798082 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.900912046 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.901025057 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.901025057 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.901068926 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.901086092 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.901122093 CEST	49911	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.901130915 CEST	443	49911	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.903784990 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.903825998 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:54.903912067 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.904124022 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:54.904139996 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.011892080 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:55.011929035 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:55.011959076 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:55.012002945 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:55.012132883 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:55.012132883 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:55.014045000 CEST	49914	443	192.168.2.7	104.244.42.65
Oct 7, 2024 16:48:55.014054060 CEST	443	49914	104.244.42.65	192.168.2.7
Oct 7, 2024 16:48:55.025974035 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.026026011 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.026091099 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.026372910 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.026393890 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.115036011 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.115461111 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.115475893 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.115910053 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.115916014 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.165628910 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.166106939 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.166121006 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.166518927 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.166523933 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.210083008 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.210263968 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.210331917 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.210408926 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.210433006 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.210444927 CEST	49915	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.210453987 CEST	443	49915	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.213447094 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.213469982 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.213546991 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.213701963 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.213716984 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263508081 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263575077 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263652086 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.263663054 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263885021 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263945103 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.263969898 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263983965 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.263983965 CEST	49916	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.263993025 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.263998985 CEST	443	49916	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.267026901 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.267072916 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.267157078 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.267318964 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.267337084 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.395562887 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.397315979 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.397332907 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.397588015 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.397593021 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.490677118 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.490794897 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.490854025 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.490953922 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.490953922 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.495184898 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.495206118 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.495215893 CEST	49917	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.495223045 CEST	443	49917	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.506704092 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.511054993 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.528073072 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.540394068 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.540417910 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.545701981 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.545711040 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.545949936 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.545964956 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.546973944 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.546973944 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.546984911 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.546997070 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.547995090 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.548023939 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.548145056 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.548265934 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.548279047 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.549607038 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.549679041 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.549968958 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.550100088 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.550103903 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.550143003 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.600533009 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.600548983 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.640089035 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.640448093 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.640513897 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.640671968 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.640671968 CEST	49919	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.640687943 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.640697002 CEST	443	49919	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.643177032 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.643217087 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.643285036 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.643439054 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.643455029 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.647322893 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.652998924 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.653023005 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.653064013 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.653079987 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.653115034 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.653345108 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.653358936 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.653368950 CEST	49918	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.653374910 CEST	443	49918	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.655965090 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.655988932 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.656088114 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.656961918 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.656972885 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.710928917 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.710964918 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.711005926 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.711152077 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.711242914 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.711242914 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.712347031 CEST	49920	443	192.168.2.7	104.244.42.1
Oct 7, 2024 16:48:55.712361097 CEST	443	49920	104.244.42.1	192.168.2.7
Oct 7, 2024 16:48:55.826298952 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.826976061 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.826988935 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.827306032 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.827311039 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.881580114 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.882226944 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.882242918 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.882615089 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.882621050 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.923696041 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.923851967 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.924037933 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.924037933 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.924037933 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.926822901 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.926846027 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.926985979 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.927185059 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.927196980 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.977849007 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.978048086 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.978136063 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.978234053 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.978234053 CEST	49922	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.978250980 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.978257895 CEST	443	49922	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.980973959 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.981019974 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:55.981110096 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.981277943 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:55.981293917 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.154670000 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.155184984 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.155208111 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.155594110 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.155600071 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.239450932 CEST	49921	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.239480019 CEST	443	49921	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.248960972 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249017000 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249027014 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249119997 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249198914 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.249198914 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.249352932 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.249371052 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249376059 CEST	49923	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.249381065 CEST	443	49923	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249497890 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.249510050 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.249887943 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.249892950 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.252075911 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.252111912 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.252196074 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.252327919 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.252340078 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.260812044 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.261163950 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.261181116 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.261614084 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.261620045 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.345330954 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.345383883 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.345674038 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.345849037 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.345864058 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.345875025 CEST	49924	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.345881939 CEST	443	49924	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.348774910 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.348812103 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.348925114 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.349073887 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.349088907 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.360466003 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.360789061 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.360826015 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.360883951 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.361042976 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.361042976 CEST	49925	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.361059904 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.361063957 CEST	443	49925	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.362721920 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.362739086 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.362828016 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.363029957 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.363044024 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.542453051 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.543001890 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.543015957 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.543313980 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.543318033 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.616962910 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.617669106 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.617683887 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.617980957 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.617985964 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.640562057 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.640701056 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.640861988 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.640892029 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.640908003 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.640918016 CEST	49926	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.640923977 CEST	443	49926	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.643635988 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.643660069 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.643733025 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.643894911 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.643907070 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.733985901 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.734420061 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.734469891 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.734489918 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.734529972 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.734587908 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.734601021 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.734612942 CEST	49927	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.734618902 CEST	443	49927	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.737545013 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.737577915 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.737649918 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.737778902 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.737798929 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.869190931 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.869729042 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.869740009 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.870342016 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.870347023 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.964344025 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.964521885 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.964603901 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.964695930 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.964709044 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.964719057 CEST	49928	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.964725018 CEST	443	49928	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.967930079 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.967983007 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.968080044 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.968244076 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.968261003 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.968504906 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.968868017 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.968889952 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.969477892 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.969482899 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.975172043 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.975541115 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.975548983 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:56.976031065 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:56.976036072 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.207146883 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.207201004 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.207420111 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.207668066 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.207668066 CEST	49929	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.207686901 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.207701921 CEST	443	49929	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.210863113 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.210872889 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.210971117 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.211139917 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.211152077 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.293507099 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.293555975 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.293742895 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.294006109 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.294024944 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.294063091 CEST	49930	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.294071913 CEST	443	49930	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.297679901 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.297712088 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.297864914 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.298015118 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.298038960 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.392524004 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.393305063 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.393316984 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.393686056 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.393819094 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.393822908 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.394113064 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.394145012 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.394637108 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.394658089 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.488676071 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.488774061 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.488892078 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.489444017 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.489444017 CEST	49931	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.489459991 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.489468098 CEST	443	49931	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.490144014 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.490276098 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.490349054 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.490525007 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.490547895 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.490586042 CEST	49932	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.490596056 CEST	443	49932	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.492885113 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.492919922 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.493021011 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.493128061 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.493151903 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.493175983 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.493189096 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.493227005 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.493532896 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.493547916 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.592331886 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.592889071 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.592906952 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.593460083 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.593466043 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.974706888 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.974796057 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.974881887 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.974904060 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.974921942 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.974987984 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.980381966 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.980406046 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.980416059 CEST	49933	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.980422974 CEST	443	49933	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.983618975 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.983638048 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:57.983880043 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.983880043 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:57.983908892 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.149333954 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.151882887 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.151912928 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.152178049 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.152185917 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.158520937 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.158885002 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.159496069 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.159598112 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.159609079 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.160319090 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.160336018 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.160378933 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.160386086 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.160865068 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.160871029 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.161039114 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.161056042 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.162770987 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.162786961 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.244692087 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.245013952 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.245162964 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.245326996 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.245354891 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.245362043 CEST	49934	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.245368958 CEST	443	49934	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.248169899 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.248213053 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.248290062 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.248461008 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.248476028 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.252160072 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.252321005 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.252408028 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.252408028 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.252677917 CEST	49936	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.252692938 CEST	443	49936	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.254209995 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.254234076 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.254368067 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.254463911 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.254471064 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.255805969 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.255959988 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256023884 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256048918 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256057024 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.256118059 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.256144047 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.256144047 CEST	49935	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.256160975 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256170034 CEST	443	49935	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256458044 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256503105 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.256526947 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256561995 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.256675005 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.257046938 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.257046938 CEST	49937	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.257056952 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.257064104 CEST	443	49937	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.258838892 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.258882046 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.258940935 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.259160042 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.259176016 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.259622097 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.259629965 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.259681940 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.259768963 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.259778976 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.607223034 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.607712984 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.607721090 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.608100891 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.608105898 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.703924894 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.704081059 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.704159021 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.704256058 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.704268932 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.704279900 CEST	49938	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.704284906 CEST	443	49938	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.707020998 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.707039118 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.707127094 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.707293034 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.707304955 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.868016005 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.868650913 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.868664980 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.868978977 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.868983030 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.881360054 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.881689072 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.881702900 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.881891012 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.881896019 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.908350945 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.908720970 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.908745050 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.909132004 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.909138918 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.909631968 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.909856081 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.909869909 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.910132885 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.910137892 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.964747906 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.971551895 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.971613884 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.971627951 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.971681118 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.971714973 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.971736908 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.971751928 CEST	49939	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.971760035 CEST	443	49939	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.974062920 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.974123001 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.974193096 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.974328995 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.974347115 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.978575945 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.978602886 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.978657961 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.978662014 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.978707075 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.979326963 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.979341030 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.979351997 CEST	49941	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.979357004 CEST	443	49941	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.981494904 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.981518030 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:58.981786966 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.981786966 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:58.981817007 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.010608912 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.010647058 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.010725021 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.010737896 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.010906935 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.010958910 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.011001110 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.011012077 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.011020899 CEST	49942	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.011025906 CEST	443	49942	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.014126062 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.014144897 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.014238119 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.014383078 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.014395952 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.032448053 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.032901049 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.032975912 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.033018112 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.033018112 CEST	49940	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.033040047 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.033051968 CEST	443	49940	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.035459995 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.035491943 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.035562038 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.035685062 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.035701036 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.321634054 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.322216988 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.322247982 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.322654009 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.322662115 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.415821075 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.415980101 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.416017056 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.416099072 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.416126966 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.416388035 CEST	49943	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.416400909 CEST	443	49943	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.419689894 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.419722080 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.419873953 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.420119047 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.420131922 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.623259068 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.623913050 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.623929024 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.624505043 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.624511957 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.626663923 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.627032995 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.627042055 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.627698898 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.627707005 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.633725882 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.634154081 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.634179115 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.634768963 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.634774923 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.677103043 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.678035021 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.678056955 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.678728104 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.678735018 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.719552994 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.719950914 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.720068932 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.720253944 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.720253944 CEST	49946	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.720277071 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.720288038 CEST	443	49946	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.723622084 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.723659992 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.723750114 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.723903894 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.723917961 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.725574970 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.725795031 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.725872993 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.725883007 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.725919008 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.725975990 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.725975990 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.725975990 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.728514910 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.728538036 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.728615046 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.728730917 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.728740931 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.734345913 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.734642982 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.734694958 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.734730005 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.734730005 CEST	49944	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.734745026 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.734752893 CEST	443	49944	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.737061024 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.737091064 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.737220049 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.737278938 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.737296104 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.775654078 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.775738001 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.775825977 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.775835991 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.775859118 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.775912046 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.775986910 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.775993109 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.776026964 CEST	49947	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.776031971 CEST	443	49947	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.778256893 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.778281927 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:48:59.778430939 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.778557062 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:48:59.778564930 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.037255049 CEST	49945	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.037277937 CEST	443	49945	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.073328018 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.074112892 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.074136972 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.074538946 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.074548006 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.333230972 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.333771944 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.333792925 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.334328890 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.334588051 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.334598064 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.334906101 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.334912062 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.335740089 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.335743904 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.408802986 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.409785986 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.409799099 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.410185099 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.410202980 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.427776098 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.427850962 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.427966118 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.427999973 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.428024054 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.428127050 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.428141117 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.428150892 CEST	49949	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.428157091 CEST	443	49949	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.430797100 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.430816889 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.430895090 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.431037903 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.431050062 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.438144922 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.438323975 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.438366890 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.438388109 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.438394070 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.438400984 CEST	49950	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.438405037 CEST	443	49950	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.440095901 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.440108061 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.440180063 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.440296888 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.440304041 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.476475954 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.476681948 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.476783037 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.476811886 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.476811886 CEST	49948	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.476823092 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.476831913 CEST	443	49948	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.478921890 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.478945971 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.479034901 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.479167938 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.479181051 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.616067886 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.616292000 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.616485119 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.616485119 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.619294882 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.619297028 CEST	49952	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.619308949 CEST	443	49952	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.619316101 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:00.619414091 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.619579077 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:00.619592905 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.409682989 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.410298109 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.410326958 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.410636902 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.410645962 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.412312984 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.412548065 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.412566900 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.413050890 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.413055897 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.417241096 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.417459965 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.417478085 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.417725086 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.417736053 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.419856071 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.420073032 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.420095921 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.420330048 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.420342922 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.505496979 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.505575895 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.505820990 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.506086111 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.506108999 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.506124973 CEST	49956	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.506130934 CEST	443	49956	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.509042025 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.509089947 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.509177923 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.509361029 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.509385109 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.513650894 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.513838053 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.513931036 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.513931036 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.513957977 CEST	49955	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.513963938 CEST	443	49955	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.516160011 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.516184092 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.516259909 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.516396999 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.516406059 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.516582966 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.517040968 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.517098904 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.517100096 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.517153025 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.517189980 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.517209053 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.517220974 CEST	49954	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.517226934 CEST	443	49954	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.517813921 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.518151045 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.518215895 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.518266916 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.518271923 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.518284082 CEST	49953	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.518286943 CEST	443	49953	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.519407034 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.519438028 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.519519091 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.519629955 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.519640923 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.520118952 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.520155907 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.520220041 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.520312071 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.520328045 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.733591080 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.734390020 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.734405994 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.734602928 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.734607935 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.908180952 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.908307076 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.908356905 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.908587933 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.908587933 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.908587933 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.908587933 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.911245108 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.911288977 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:01.911364079 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.911499977 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:01.911504984 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.127846003 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.128896952 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.128918886 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.129640102 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.129647017 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.130995035 CEST	49951	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.131011963 CEST	443	49951	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.131493092 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.131946087 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.131967068 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.132391930 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.132395983 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.132924080 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.133244038 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.133265018 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.133687973 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.133693933 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.152966976 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.153506041 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.153537035 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.153709888 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.153717041 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.230664968 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.230703115 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.230751991 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.230915070 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.231107950 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.231123924 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.231162071 CEST	49960	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.231168032 CEST	443	49960	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.232651949 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.232687950 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.232723951 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.232742071 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.232774019 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.232887030 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.232912064 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.232933044 CEST	49958	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.232940912 CEST	443	49958	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.233165026 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.233222961 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.233273029 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.233339071 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.233352900 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.233364105 CEST	49961	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.233369112 CEST	443	49961	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.233849049 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.233884096 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.233949900 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.234055996 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.234074116 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.235578060 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.235588074 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.235666990 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.235702038 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.235734940 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.235758066 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.235790014 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.235802889 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.235909939 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.235924006 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.251641989 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.251955032 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.252124071 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.252124071 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.252124071 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.253928900 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.253952026 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.254048109 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.254209995 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.254221916 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.531362057 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.531793118 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.531816959 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.532227039 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.532233000 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.552850962 CEST	49959	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.552886963 CEST	443	49959	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.629609108 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.629842043 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.629911900 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.629957914 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.629973888 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.629983902 CEST	49962	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.629990101 CEST	443	49962	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.632536888 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.632591009 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.632663012 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.632790089 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.632803917 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.848191023 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.848891973 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.848902941 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.849368095 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.849374056 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.862113953 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.862894058 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.862905979 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.863161087 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.863164902 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.869376898 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.869627953 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.869642973 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.870048046 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.870054007 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.880806923 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.881150961 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.881170988 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.881495953 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.881501913 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.944837093 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.944915056 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.945115089 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.945115089 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.945142031 CEST	49967	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.945162058 CEST	443	49967	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.947901011 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.947937012 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.948036909 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.948182106 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.948188066 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.957144022 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.957247972 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.957361937 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.957417965 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.957417965 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.957473993 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.957473993 CEST	49968	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.957489967 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.957499027 CEST	443	49968	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.959790945 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.959810972 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.960021019 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.960021019 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.960041046 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.968710899 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.968858957 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.968936920 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.968936920 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.968959093 CEST	49966	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.968971014 CEST	443	49966	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.970743895 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.970792055 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.970868111 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.970987082 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.971003056 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.981004953 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.981065989 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.981106997 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.981117964 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.981133938 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.981278896 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.981278896 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.981278896 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.982953072 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.982976913 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:02.983050108 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.983160019 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:02.983170986 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.255085945 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.255465031 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.255472898 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.255968094 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.255973101 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.286861897 CEST	49965	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.286873102 CEST	443	49965	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.356669903 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.357074976 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.357124090 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.357152939 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.357161045 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.357168913 CEST	49969	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.357173920 CEST	443	49969	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.359700918 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.359744072 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.359836102 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.359955072 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.359963894 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.587019920 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.588313103 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.591589928 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.595038891 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.603410959 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.603441954 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.603487968 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.603512049 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.603854895 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.603862047 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.603935957 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.603940964 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.604069948 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.604100943 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.604401112 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.604410887 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.604701042 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.604724884 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.604994059 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.605010033 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.661078930 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:03.661151886 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:03.661304951 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:03.694854021 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.695368052 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.695609093 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.697839975 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.698252916 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.698327065 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.699157953 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.699402094 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.699453115 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.699454069 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.699498892 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.704128027 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.704128027 CEST	49971	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.704163074 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.704175949 CEST	443	49971	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.705113888 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.705113888 CEST	49972	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.705144882 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.705157995 CEST	443	49972	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.706708908 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.706727982 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.706741095 CEST	49970	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.706748009 CEST	443	49970	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.712245941 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.712346077 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.712416887 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.727533102 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.727550983 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.729671955 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.729875088 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.729948997 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.729948997 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.729980946 CEST	49973	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.729994059 CEST	443	49973	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.750571012 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.750602007 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.750667095 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.750834942 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.750848055 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.751902103 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.751940012 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.751997948 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.752799988 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.752810001 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.752856970 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.759337902 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.759356022 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.770426035 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:03.770447016 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:03.991292000 CEST	49902	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:03.991318941 CEST	443	49902	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:04.008299112 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.030191898 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.030205011 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.030488014 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.030503988 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.131103039 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.131136894 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.131182909 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.131185055 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.131253958 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.131578922 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.131578922 CEST	49974	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.131612062 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.131618023 CEST	443	49974	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.139272928 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.139307976 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.139379978 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.139522076 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.139528990 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.337321043 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.337765932 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.337805033 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.338191986 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.338207006 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.368067026 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.368513107 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.368530035 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.369082928 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.369088888 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.403698921 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.404159069 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.404175997 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.404217005 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.404517889 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.404534101 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.404769897 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.404776096 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.405056000 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.405070066 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.432940960 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.433621883 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.433701038 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.433762074 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.433782101 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.433794975 CEST	49975	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.433800936 CEST	443	49975	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.436445951 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.436475039 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.436553955 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.436676979 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.436693907 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.464025974 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.464096069 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.464168072 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.464440107 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.464466095 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.464479923 CEST	49977	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.464487076 CEST	443	49977	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.467276096 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.467339993 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.467433929 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.467556953 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.467576981 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.499937057 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.500046015 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.500102043 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.500113010 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.500154972 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.500202894 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.500261068 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.500272036 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.500283003 CEST	49978	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.500288963 CEST	443	49978	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.503009081 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.503041983 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.503108978 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.503288031 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.503304005 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.506905079 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.507124901 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.507179976 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.507189035 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.507275105 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.507281065 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.507291079 CEST	49976	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.508014917 CEST	443	49976	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.509426117 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.509453058 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.509520054 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.509654999 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.509669065 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.808119059 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.808669090 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.808682919 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.809142113 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.809148073 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.903914928 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.904122114 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.904172897 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.904201031 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.904211998 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.904222012 CEST	49981	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.904227018 CEST	443	49981	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.906600952 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.906641006 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:04.906717062 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.906863928 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:04.906872988 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.082329035 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.082462072 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.082881927 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.082890034 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.082909107 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.082911015 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.083455086 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.083462000 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.083545923 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.083556890 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.141777039 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.142750978 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.142771006 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.143512011 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.143518925 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.178019047 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.178066969 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.178899050 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.178966045 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.179152966 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.179179907 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.179194927 CEST	49983	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.179203033 CEST	443	49983	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.179758072 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.179821968 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.181308031 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.181335926 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.181349993 CEST	49982	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.181358099 CEST	443	49982	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.188457966 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.188502073 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.188559055 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.188584089 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.188586950 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.188647985 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.188868999 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.188884974 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.189492941 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.189512968 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.237354994 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.237766981 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.237827063 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.238168001 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.238188982 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.238204002 CEST	49985	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.238214016 CEST	443	49985	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.241101027 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.241130114 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.241193056 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.242257118 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.242275000 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.265029907 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.265352011 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.265366077 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.266170025 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.266176939 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.362251997 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.362538099 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.362592936 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.362605095 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.362772942 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.363114119 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.363136053 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.363148928 CEST	49984	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.363154888 CEST	443	49984	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.365597963 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.365653038 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.365732908 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.365916014 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.365926981 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.516369104 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.516860008 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.516882896 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.517477036 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.517483950 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.614274979 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.614342928 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.614388943 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.614613056 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.614631891 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.614640951 CEST	49986	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.614646912 CEST	443	49986	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.618098974 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.618138075 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.618221998 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.618407965 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.618429899 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.797729969 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.798331976 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.798355103 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.798933983 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.798942089 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.821726084 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.827022076 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.827039003 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.827430964 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.827436924 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.864581108 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.865466118 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.865499020 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.866357088 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.866386890 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.893871069 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.893939972 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.893992901 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.895164013 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.895186901 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.895200968 CEST	49988	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.895209074 CEST	443	49988	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.906675100 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.906721115 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.906800032 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.908236980 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.908255100 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.923259020 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.923738003 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.923805952 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.923861980 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.923875093 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.923886061 CEST	49987	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.923891068 CEST	443	49987	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.926328897 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.926367998 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.926445961 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.926649094 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.926677942 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.962800980 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.962970018 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.963046074 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.964287043 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.964310884 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.964324951 CEST	49989	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.964332104 CEST	443	49989	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.970649004 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.970695972 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.970762968 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.971229076 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.971249104 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.975451946 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.975944996 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.975965023 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:05.976515055 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:05.976521015 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.069405079 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.069489956 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.069576979 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.069853067 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.069888115 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.069902897 CEST	49990	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.069911957 CEST	443	49990	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.073079109 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.073116064 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.073223114 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.073539019 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.073560953 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.256320953 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.256865978 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.256899118 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.257540941 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.257549047 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.361251116 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.361521959 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.361588955 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.361644983 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.361665964 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.361679077 CEST	49991	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.361686945 CEST	443	49991	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.365187883 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.365201950 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.365397930 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.365792990 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.365806103 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.513153076 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.513844013 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.513875961 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.514275074 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.514281988 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.548314095 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.548906088 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.548913956 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.549209118 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.549211979 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.590406895 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.590893984 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.590917110 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.591473103 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.591484070 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.608139992 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.608459949 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.608500004 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.608520985 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.608572960 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.608625889 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.608644962 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.608656883 CEST	49994	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.608663082 CEST	443	49994	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.611129045 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.611174107 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.611251116 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.611448050 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.611469030 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.645586967 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.645663023 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.645714045 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.645884037 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.645884037 CEST	49995	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.645910978 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.645919085 CEST	443	49995	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.648519039 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.648546934 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.648663044 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.648767948 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.648781061 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.685986042 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.687294006 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.687364101 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.687413931 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.687443018 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.687508106 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.687508106 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.687535048 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.687746048 CEST	49996	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.687758923 CEST	443	49996	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.689843893 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.689892054 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.689971924 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.690157890 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.690190077 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.721081972 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.721673965 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.721698999 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.722275019 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.722281933 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.819004059 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.819149017 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.819293976 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.819397926 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.819397926 CEST	49997	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.819418907 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.819430113 CEST	443	49997	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.822400093 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.822451115 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:06.822536945 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.822807074 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:06.822829008 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.002636909 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.003174067 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.003186941 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.003937006 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.003942966 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.103213072 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.103322029 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.103378057 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.103528976 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.103593111 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.103593111 CEST	49998	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.103607893 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.103619099 CEST	443	49998	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.106693983 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.106740952 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.106827021 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.107034922 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.107043982 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.251280069 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.251799107 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.251817942 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.252213955 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.252222061 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.285574913 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.286119938 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.286144018 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.286976099 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.286982059 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.304048061 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.304548979 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.304582119 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.304969072 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.304974079 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.350495100 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.350573063 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.350640059 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.350831032 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.350848913 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.350857019 CEST	49999	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.350863934 CEST	443	49999	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.353678942 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.353707075 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.353780985 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.353996992 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.354008913 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.384955883 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.385512114 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.385867119 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.385867119 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.385901928 CEST	50000	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.385915995 CEST	443	50000	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.389602900 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.389640093 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.390460968 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.390604019 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.390619040 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.398545027 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.398741961 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.398835897 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.398871899 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.398890018 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.398900986 CEST	50001	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.398905993 CEST	443	50001	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.402209044 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.402228117 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.402306080 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.402497053 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.402512074 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.433497906 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.434019089 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.434047937 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.434598923 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.434604883 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.529030085 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.529078007 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.529124022 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.529177904 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.529392958 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.529413939 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.529448032 CEST	50002	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.529458046 CEST	443	50002	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.533617020 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.533657074 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.533818007 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.534022093 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.534035921 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.729581118 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.730223894 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.730246067 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.730818987 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.730825901 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.826786041 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.826900005 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.827159882 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.827194929 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.827228069 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.827240944 CEST	50003	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.827258110 CEST	443	50003	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.830640078 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.830672026 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.830838919 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.830936909 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.830954075 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.963114977 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.963668108 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.963675976 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:07.964268923 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:07.964272976 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.019701958 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.020284891 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.020309925 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.020878077 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.020883083 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.028356075 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.028738022 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.028754950 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.029258013 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.029268026 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.067116976 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.067192078 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.067240000 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.067426920 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.067444086 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.067459106 CEST	50004	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.067473888 CEST	443	50004	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.070607901 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.070646048 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.070734978 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.070905924 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.070916891 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.116436958 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.116511106 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.116560936 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.116575956 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.116643906 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.116698027 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.116812944 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.116827965 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.116838932 CEST	50005	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.116844893 CEST	443	50005	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.119951963 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.119997978 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.120126963 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.120285034 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.120299101 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.125909090 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.125969887 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.126008987 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.126135111 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.126147985 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.126158953 CEST	50006	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.126163006 CEST	443	50006	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.128237009 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.128268957 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.128313065 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.128504038 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.128519058 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.162986994 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.163446903 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.163465977 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.164079905 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.164091110 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.261270046 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.261302948 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.261374950 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.261394978 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.261504889 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.261554003 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.261678934 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.261702061 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.261713028 CEST	50007	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.261718988 CEST	443	50007	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.265083075 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.265129089 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.265193939 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.265337944 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.265350103 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.439616919 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.440723896 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.440723896 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.440746069 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.440757036 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.534807920 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.534832954 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.534884930 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.534940958 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.534941912 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.535175085 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.535187960 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.535203934 CEST	50008	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.535209894 CEST	443	50008	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.538213968 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.538255930 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.538321018 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.538464069 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.538477898 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.711047888 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.711513996 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.711528063 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.711987972 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.711992979 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.771996975 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.772684097 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.772701025 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.773328066 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.773334026 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.775901079 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.776415110 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.776426077 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.776844978 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.776851892 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.826525927 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.826544046 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.826591015 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.826601982 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.826617002 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.826659918 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.826761961 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.826776028 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.826781988 CEST	50009	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.826795101 CEST	443	50009	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.829282999 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.829329967 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.829524994 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.829571009 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.829582930 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.871838093 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.872282982 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.872375011 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.872387886 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.872411013 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.872421026 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.872803926 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.872836113 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.872972965 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.872972965 CEST	50011	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.872992992 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.872999907 CEST	443	50011	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.875356913 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.875392914 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.875480890 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.875590086 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.875606060 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.876895905 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.876919031 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.876971960 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.877007961 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.877046108 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.877548933 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.877567053 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.877578974 CEST	50010	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.877584934 CEST	443	50010	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.879539013 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.879548073 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.879611969 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.879745007 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.879756927 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.994240999 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.994541883 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.994647026 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.994786024 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.994786024 CEST	50012	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.994832993 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.994860888 CEST	443	50012	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.997386932 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.997431040 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:08.997504950 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.997639894 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:08.997668982 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.145550013 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.146667004 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.146696091 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.147197008 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.147209883 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.347255945 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.347439051 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.347503901 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.347615004 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.347632885 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.347642899 CEST	50013	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.347647905 CEST	443	50013	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.350824118 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.350857019 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.350936890 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.351178885 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.351192951 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.435867071 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.436799049 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.436822891 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.436954975 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.436959982 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.484396935 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.485034943 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.485102892 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.485337019 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.485351086 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.508778095 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.509577990 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.509596109 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.509998083 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.510001898 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.531774998 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.532007933 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.532175064 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.532176018 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.532176018 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.535185099 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.535229921 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.535321951 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.535556078 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.535572052 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.585448980 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.585481882 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.585546970 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.585611105 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.585642099 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.585922003 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.585932970 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.585946083 CEST	50016	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.585952044 CEST	443	50016	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.589133978 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.589171886 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.589277029 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.589543104 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.589560986 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607055902 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607086897 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607172012 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.607181072 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607228041 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.607263088 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607328892 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607372046 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.607496023 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.607501030 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.607518911 CEST	50015	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.607522964 CEST	443	50015	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.609586954 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.610455990 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.610491037 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.610553026 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.611210108 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.611226082 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.611587048 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.611593008 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.611613989 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.611629009 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.709011078 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.709038973 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.709054947 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.709299088 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.709299088 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.709321022 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.709415913 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.790144920 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.790211916 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.790337086 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.790337086 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.790481091 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.790481091 CEST	50017	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.790504932 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.790515900 CEST	443	50017	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.793386936 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.793421984 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.793521881 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.793713093 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.793726921 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.834151983 CEST	50014	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.834202051 CEST	443	50014	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.995990992 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.996757984 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.996776104 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:09.997185946 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:09.997203112 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.097136974 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.097156048 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.098256111 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.098294020 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.098455906 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.098602057 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.098602057 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.098602057 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.098630905 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.101751089 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.101794958 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.101923943 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.102207899 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.102224112 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.167067051 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.167751074 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.167776108 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.168396950 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.168411016 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.217036009 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.218169928 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.218194008 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.218532085 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.218539000 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.243972063 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.244596004 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.244621992 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.245062113 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.245066881 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.268667936 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.268697977 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.268712997 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.268819094 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.268858910 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.269033909 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.314201117 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.314277887 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.314449072 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.314642906 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.314642906 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.314642906 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.314642906 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.317790031 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.317814112 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.317955017 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.318028927 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.318034887 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.351375103 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.351416111 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.351501942 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.351522923 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.351605892 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.351757050 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.351845026 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.351857901 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.351869106 CEST	50021	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.351876020 CEST	443	50021	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.354013920 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.354044914 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.354110003 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.354137897 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.354204893 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.354238033 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.354238033 CEST	50019	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.354258060 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.354279995 CEST	443	50019	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.355127096 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.355164051 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.355247974 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.355428934 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.355448008 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.356425047 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.356441975 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.356508970 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.356642962 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.356658936 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.407490969 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.408011913 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.408030987 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.408441067 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.408446074 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.411874056 CEST	50018	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.411899090 CEST	443	50018	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.503154039 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.503227949 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.503372908 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.503618956 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.503638983 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.503650904 CEST	50022	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.503658056 CEST	443	50022	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.510235071 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.510272980 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.510360003 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.510554075 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.510565996 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.615130901 CEST	50020	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.615150928 CEST	443	50020	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.702569008 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.703205109 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.703224897 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.703787088 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.703793049 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.797688007 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.797759056 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.797900915 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.798063040 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.798083067 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.798280001 CEST	50023	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.798289061 CEST	443	50023	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.801063061 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.801103115 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.801204920 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.801399946 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.801414013 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.953488111 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.954108953 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.954123020 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.954541922 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.954547882 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.956774950 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.957081079 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.957102060 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.957396984 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.957402945 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.959316015 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.959619999 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.959635019 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:10.960171938 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:10.960176945 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.052016020 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.052114964 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.052491903 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.052556992 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.052766085 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.052786112 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.052799940 CEST	50024	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.052807093 CEST	443	50024	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.053183079 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.053241014 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.053245068 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.053296089 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.054344893 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.054362059 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.054371119 CEST	50026	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.054375887 CEST	443	50026	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.054544926 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.054601908 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.054666996 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.055624008 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.055629015 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.055649996 CEST	50025	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.055655003 CEST	443	50025	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.057018995 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.057056904 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.057142973 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.058268070 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.058285952 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.058347940 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.058521986 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.058537006 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.058701038 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.058716059 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.115071058 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.115660906 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.115679979 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.116095066 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.116101027 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.210794926 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.211129904 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.211189032 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.211232901 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.211257935 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.211272955 CEST	50027	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.211282015 CEST	443	50027	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.420034885 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.420912027 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.420936108 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.421365976 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.421372890 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.516272068 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.516628027 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.516705036 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.516772985 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.516793013 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.516805887 CEST	50028	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.516812086 CEST	443	50028	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.671881914 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.671925068 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.672461987 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.672470093 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.672952890 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.672956944 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.673229933 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.673237085 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.673605919 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.673610926 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.767000914 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.767173052 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.767262936 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.767352104 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.767360926 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.767373085 CEST	50029	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.767378092 CEST	443	50029	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.768513918 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.768575907 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.768623114 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.768784046 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.768788099 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:11.768804073 CEST	50030	443	192.168.2.7	13.107.246.45
Oct 7, 2024 16:49:11.768806934 CEST	443	50030	13.107.246.45	192.168.2.7
Oct 7, 2024 16:49:14.660206079 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:14.660258055 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:14.660331011 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:14.660630941 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:14.660648108 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.238059998 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.238140106 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.241308928 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.241318941 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.241552114 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.247235060 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.287405968 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.676713943 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.676743984 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.676763058 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.676912069 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.676929951 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.676986933 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.678143978 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.678220034 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.678221941 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.678282022 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.679121017 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.679136992 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:15.679150105 CEST	50031	443	192.168.2.7	20.12.23.50
Oct 7, 2024 16:49:15.679157019 CEST	443	50031	20.12.23.50	192.168.2.7
Oct 7, 2024 16:49:18.906232119 CEST	443	49774	104.98.116.138	192.168.2.7
Oct 7, 2024 16:49:18.906295061 CEST	49774	443	192.168.2.7	104.98.116.138
Oct 7, 2024 16:49:53.178858995 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:53.178919077 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:53.179006100 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:53.179275036 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:53.179297924 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:53.780772924 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:53.781414032 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:53.781449080 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:53.781737089 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:53.783291101 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:49:53.783360004 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:49:53.833837986 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:50:03.692567110 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:50:03.692652941 CEST	443	50033	216.58.206.68	192.168.2.7
Oct 7, 2024 16:50:03.692725897 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:50:04.791249990 CEST	50033	443	192.168.2.7	216.58.206.68
Oct 7, 2024 16:50:04.791296959 CEST	443	50033	216.58.206.68	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 16:48:23.610865116 CEST	123	123	192.168.2.7	13.95.65.251
Oct 7, 2024 16:48:23.776022911 CEST	123	123	13.95.65.251	192.168.2.7
Oct 7, 2024 16:48:25.124922991 CEST	123	123	192.168.2.7	13.95.65.251
Oct 7, 2024 16:48:25.289781094 CEST	123	123	13.95.65.251	192.168.2.7
Oct 7, 2024 16:48:34.814280033 CEST	53121	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:48.451178074 CEST	54102	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:48.451329947 CEST	62583	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:48.460376978 CEST	53	54388	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:48.464221001 CEST	53	54102	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:48.467344999 CEST	53	49578	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:48.474409103 CEST	53	62583	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:49.472861052 CEST	53	55421	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:49.744602919 CEST	49804	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:49.744602919 CEST	54692	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:49.751688004 CEST	53	49804	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:49.753040075 CEST	53	54692	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:50.826137066 CEST	60694	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:50.826277971 CEST	62159	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:50.833805084 CEST	53	62159	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:50.844362020 CEST	53	60694	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:50.948743105 CEST	52454	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:50.948743105 CEST	62502	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:50.957581997 CEST	53	62502	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:50.960450888 CEST	53	52454	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:51.001543045 CEST	53	63256	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:52.802174091 CEST	53	51146	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.067300081 CEST	49869	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.067445040 CEST	61443	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.074223042 CEST	53	61443	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.075016022 CEST	53	49869	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.077280045 CEST	62786	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.077280045 CEST	59080	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.084013939 CEST	53	59080	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.084398031 CEST	53	62786	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.098431110 CEST	53	64245	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.116158009 CEST	51243	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.116224051 CEST	54188	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.123347998 CEST	53	54188	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.123543978 CEST	53	51243	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.743083000 CEST	51553	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.743913889 CEST	61608	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:53.750657082 CEST	53	61608	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:53.750812054 CEST	53	51553	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:54.314862967 CEST	50765	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:54.315084934 CEST	51824	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:54.322072983 CEST	53	50765	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:54.322280884 CEST	53	51824	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:55.017488003 CEST	64526	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:55.017549992 CEST	51646	53	192.168.2.7	1.1.1.1
Oct 7, 2024 16:48:55.025469065 CEST	53	51646	1.1.1.1	192.168.2.7
Oct 7, 2024 16:48:55.025540113 CEST	53	64526	1.1.1.1	192.168.2.7
Oct 7, 2024 16:49:01.235162973 CEST	53	49711	1.1.1.1	192.168.2.7
Oct 7, 2024 16:49:06.468600988 CEST	53	54977	1.1.1.1	192.168.2.7
Oct 7, 2024 16:49:18.701775074 CEST	138	138	192.168.2.7	192.168.2.255
Oct 7, 2024 16:49:25.420876026 CEST	53	51820	1.1.1.1	192.168.2.7
Oct 7, 2024 16:49:48.312572956 CEST	53	60627	1.1.1.1	192.168.2.7
Oct 7, 2024 16:49:48.391805887 CEST	53	53609	1.1.1.1	192.168.2.7
Oct 7, 2024 16:50:16.670981884 CEST	53	55197	1.1.1.1	192.168.2.7
Oct 7, 2024 16:51:02.077883005 CEST	53	55448	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 16:48:34.814280033 CEST	192.168.2.7	1.1.1.1	0x17ca	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:48.451178074 CEST	192.168.2.7	1.1.1.1	0x14b6	Standard query (0)	laicrt0920.kt8.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:48.451329947 CEST	192.168.2.7	1.1.1.1	0x84ec	Standard query (0)	laicrt0920.kt8.co	65	IN (0x0001)	false
Oct 7, 2024 16:48:49.744602919 CEST	192.168.2.7	1.1.1.1	0x41df	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:49.744602919 CEST	192.168.2.7	1.1.1.1	0x7c5d	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Oct 7, 2024 16:48:50.826137066 CEST	192.168.2.7	1.1.1.1	0xf5ab	Standard query (0)	laicrt0920.kt8.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:50.826277971 CEST	192.168.2.7	1.1.1.1	0x5fd6	Standard query (0)	laicrt0920.kt8.co	65	IN (0x0001)	false
Oct 7, 2024 16:48:50.948743105 CEST	192.168.2.7	1.1.1.1	0xedec	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:50.948743105 CEST	192.168.2.7	1.1.1.1	0x1053	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Oct 7, 2024 16:48:53.067300081 CEST	192.168.2.7	1.1.1.1	0xd9d9	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.067445040 CEST	192.168.2.7	1.1.1.1	0x69e7	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 16:48:53.077280045 CEST	192.168.2.7	1.1.1.1	0x340d	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.077280045 CEST	192.168.2.7	1.1.1.1	0x10e7	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 7, 2024 16:48:53.116158009 CEST	192.168.2.7	1.1.1.1	0x5388	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.116224051 CEST	192.168.2.7	1.1.1.1	0xaeb3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 16:48:53.743083000 CEST	192.168.2.7	1.1.1.1	0x7bc7	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.743913889 CEST	192.168.2.7	1.1.1.1	0xafc	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 7, 2024 16:48:54.314862967 CEST	192.168.2.7	1.1.1.1	0x67a7	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:54.315084934 CEST	192.168.2.7	1.1.1.1	0xe0c8	Standard query (0)	x.com	65	IN (0x0001)	false
Oct 7, 2024 16:48:55.017488003 CEST	192.168.2.7	1.1.1.1	0x16f	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:55.017549992 CEST	192.168.2.7	1.1.1.1	0xa887	Standard query (0)	x.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 16:48:34.823776960 CEST	1.1.1.1	192.168.2.7	0x17ca	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:35.521182060 CEST	1.1.1.1	192.168.2.7	0x602	No error (0)	windowsupdatebg.s.llnwi.net		87.248.205.0	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:48.464221001 CEST	1.1.1.1	192.168.2.7	0x14b6	No error (0)	laicrt0920.kt8.co		172.67.200.174	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:48.464221001 CEST	1.1.1.1	192.168.2.7	0x14b6	No error (0)	laicrt0920.kt8.co		104.21.82.112	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:48.474409103 CEST	1.1.1.1	192.168.2.7	0x84ec	No error (0)	laicrt0920.kt8.co			65	IN (0x0001)	false
Oct 7, 2024 16:48:49.751688004 CEST	1.1.1.1	192.168.2.7	0x41df	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:49.751688004 CEST	1.1.1.1	192.168.2.7	0x41df	No error (0)	www3.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:49.753040075 CEST	1.1.1.1	192.168.2.7	0x7c5d	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:50.833805084 CEST	1.1.1.1	192.168.2.7	0x5fd6	No error (0)	laicrt0920.kt8.co			65	IN (0x0001)	false
Oct 7, 2024 16:48:50.844362020 CEST	1.1.1.1	192.168.2.7	0xf5ab	No error (0)	laicrt0920.kt8.co		172.67.200.174	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:50.844362020 CEST	1.1.1.1	192.168.2.7	0xf5ab	No error (0)	laicrt0920.kt8.co		104.21.82.112	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:50.957581997 CEST	1.1.1.1	192.168.2.7	0x1053	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:50.960450888 CEST	1.1.1.1	192.168.2.7	0xedec	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:48:50.960450888 CEST	1.1.1.1	192.168.2.7	0xedec	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.075016022 CEST	1.1.1.1	192.168.2.7	0xd9d9	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.084013939 CEST	1.1.1.1	192.168.2.7	0x10e7	No error (0)	api.ipify.org			65	IN (0x0001)	false
Oct 7, 2024 16:48:53.084398031 CEST	1.1.1.1	192.168.2.7	0x340d	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.084398031 CEST	1.1.1.1	192.168.2.7	0x340d	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.084398031 CEST	1.1.1.1	192.168.2.7	0x340d	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.123347998 CEST	1.1.1.1	192.168.2.7	0xaeb3	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 16:48:53.123543978 CEST	1.1.1.1	192.168.2.7	0x5388	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.750657082 CEST	1.1.1.1	192.168.2.7	0xafc	No error (0)	api.ipify.org			65	IN (0x0001)	false
Oct 7, 2024 16:48:53.750812054 CEST	1.1.1.1	192.168.2.7	0x7bc7	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.750812054 CEST	1.1.1.1	192.168.2.7	0x7bc7	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:53.750812054 CEST	1.1.1.1	192.168.2.7	0x7bc7	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:54.322072983 CEST	1.1.1.1	192.168.2.7	0x67a7	No error (0)	x.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:48:55.025540113 CEST	1.1.1.1	192.168.2.7	0x16f	No error (0)	x.com		104.244.42.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

slscr.update.microsoft.com

laicrt0920.kt8.co

https:

translate.google.com

api.ipify.org

x.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:27 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:27 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:27 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144827Z-1657d5bbd48hzllksrq1r6zsvs00000000vg00000000f7aq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:27 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 14:48:27 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:28 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:28 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144828Z-1657d5bbd48xsz2nuzq4vfrzg800000003hg0000000084wr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:28 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:28 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:28 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144828Z-1657d5bbd482krtfgrg72dfbtn00000003fg000000000cbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:28 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:28 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:28 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144828Z-1657d5bbd48tnj6wmberkg2xy800000003ng00000000unht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:28 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:28 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:28 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:28 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: a79f927d-a01e-0098-24c9-168556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144828Z-1657d5bbd48762wn1qw4s5sd3000000003m0000000000m25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:28 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:28 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:28 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144828Z-1657d5bbd48f7nlxc7n5fnfzh0000000036g00000000uc2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:28 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48f7nlxc7n5fnfzh000000003c0000000000119 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48wd55zet5pcra0cg00000003gg00000000u1hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48vhs7r2p1ky7cs5w00000003u000000000zp5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48sdh4cyzadbb374800000003kg000000000hgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd4824mj9d6vp65b6n400000003rg00000000y1qz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48sdh4cyzadbb374800000003d000000000sc2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48vhs7r2p1ky7cs5w00000003y000000000h9ed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48vlsxxpe15ac3q7n00000003hg00000000q7bz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:29 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49726	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 14:48:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=179778 Date: Mon, 07 Oct 2024 14:48:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48tnj6wmberkg2xy800000003qg00000000h8mk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:29 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144829Z-1657d5bbd48wd55zet5pcra0cg00000003hg00000000px7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:30 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:30 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144830Z-1657d5bbd48sdh4cyzadbb374800000003g000000000bsnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:30 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144830Z-1657d5bbd48xdq5dkwwugdpzr00000000410000000002rmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:30 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144830Z-1657d5bbd48cpbzgkvtewk0wu000000003p000000000seht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd482krtfgrg72dfbtn00000003f0000000002dw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd48brl8we3nu8cxwgn0000000400000000007m1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49734	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 14:48:31 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=179763 Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 14:48:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd482lxwq1dp2t1zwkc00000003fg0000000008bt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd48t66tjar5xuq22r800000003fg00000000zw6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd482krtfgrg72dfbtn00000003f0000000002dwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd48qjg85buwfdynm5w00000003n000000000x0mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144831Z-1657d5bbd482tlqpvyz9e93p5400000003u0000000001bba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd482krtfgrg72dfbtn00000003a000000000rg48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:32 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd48tqvfc1ysmtbdrg000000003f000000000mfg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:32 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd482lxwq1dp2t1zwkc0000000380000000010s2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd48sdh4cyzadbb374800000003f000000000gpm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd48xdq5dkwwugdpzr00000000410000000002rs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd48xdq5dkwwugdpzr000000003v000000000zd05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd48t66tjar5xuq22r800000003kg00000000pfgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:32 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144832Z-1657d5bbd48tnj6wmberkg2xy800000003u0000000000ut7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144833Z-1657d5bbd48tnj6wmberkg2xy800000003rg00000000dmk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144833Z-1657d5bbd48gqrfwecymhhbfm800000002hg000000002db1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a01d6c26-201e-0096-2eae-18ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144833Z-1657d5bbd48hzllksrq1r6zsvs00000000v000000000h5xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144833Z-1657d5bbd48t66tjar5xuq22r800000003q0000000003h51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:33 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144833Z-1657d5bbd48sdh4cyzadbb374800000003bg00000000ys7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48f7nlxc7n5fnfzh0000000035g00000000xdrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48sdh4cyzadbb374800000003d000000000sca0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48lknvp09v995n790000000037000000000qwc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48tnj6wmberkg2xy800000003t0000000005drq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48vlsxxpe15ac3q7n00000003qg0000000031cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48xdq5dkwwugdpzr000000003x000000000qp33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:34 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:34 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144834Z-1657d5bbd48vhs7r2p1ky7cs5w00000003xg00000000m9xx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:34 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144835Z-1657d5bbd482krtfgrg72dfbtn00000003e0000000006ugt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144835Z-1657d5bbd48q6t9vvmrkd293mg00000003q0000000004dyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144835Z-1657d5bbd48f7nlxc7n5fnfzh000000003ag000000006tpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 4d501e36-901e-0029-1978-18274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144835Z-1657d5bbd48hzllksrq1r6zsvs00000000x000000000816g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:35 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144835Z-1657d5bbd48vlsxxpe15ac3q7n00000003p000000000971r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd482lxwq1dp2t1zwkc00000003d000000000bx3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd48gqrfwecymhhbfm800000002k0000000000939 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd482krtfgrg72dfbtn00000003c000000000fepz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd482krtfgrg72dfbtn00000003eg00000000581y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd48qjg85buwfdynm5w00000003u0000000002792 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd48sqtlf1huhzuwq70000000039000000000v1sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd48xdq5dkwwugdpzr000000003v000000000zd9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:36 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:36 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:36 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144836Z-1657d5bbd487nf59mzf5b3gk8n000000037000000000p507 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd48brl8we3nu8cxwgn00000003vg00000000w70a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd487nf59mzf5b3gk8n000000036g00000000rtc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49773	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bUrdZSL86wtcyFx&MD=AK9+y2x6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 14:48:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b49e701b-ca27-4f83-9846-64d3e62b43df MS-RequestId: d46b6e0a-e2f0-4ed1-9e15-50ba7889e178 MS-CV: xz0Hc7gxBUysklzY.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 14:48:36 GMT Connection: close Content-Length: 24490
2024-10-07 14:48:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-07 14:48:37 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd48dfrdj7px744zp8s00000003d000000000cs1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd48sdh4cyzadbb374800000003gg00000000aagp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd48sdh4cyzadbb374800000003eg00000000kgnf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd48xlwdx82gahegw4000000003wg000000006am1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:37 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:37 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:37 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144837Z-1657d5bbd48sdh4cyzadbb374800000003fg00000000dtht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144838Z-1657d5bbd48tnj6wmberkg2xy800000003pg00000000pxft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144838Z-1657d5bbd482tlqpvyz9e93p5400000003s0000000009y40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144838Z-1657d5bbd48brl8we3nu8cxwgn00000003wg00000000tcnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:38 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144838Z-1657d5bbd48xsz2nuzq4vfrzg800000003hg000000008604 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:38 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144838Z-1657d5bbd48wd55zet5pcra0cg00000003n000000000c222 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd482krtfgrg72dfbtn00000003cg00000000d4zd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48brl8we3nu8cxwgn00000003x000000000r2gm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48wd55zet5pcra0cg00000003h000000000up9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48sdh4cyzadbb374800000003d000000000scnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48sdh4cyzadbb374800000003eg00000000kgth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48xsz2nuzq4vfrzg800000003k0000000005xvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 6840301d-501e-00a3-1bad-18c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48hzllksrq1r6zsvs00000000s000000000xbn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:39 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:39 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144839Z-1657d5bbd48q6t9vvmrkd293mg00000003fg00000000yz6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:39 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd48xlwdx82gahegw4000000003wg000000006aqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd48jwrqbupe3ktsx9w00000003sg00000000ux5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd482lxwq1dp2t1zwkc00000003ag00000000sgrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd48t66tjar5xuq22r800000003mg00000000g7fg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6418a561-001e-0082-7453-185880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd48lknvp09v995n790000000035000000000y5pr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd48q6t9vvmrkd293mg00000003q0000000004emp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:40 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 64b5501f-501e-008c-2daf-18cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144840Z-1657d5bbd48hzllksrq1r6zsvs00000000r000000000z44b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144841Z-1657d5bbd4824mj9d6vp65b6n400000003qg000000010yw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144841Z-1657d5bbd482tlqpvyz9e93p5400000003tg000000003f7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144841Z-1657d5bbd48762wn1qw4s5sd3000000003dg00000000vnda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144841Z-1657d5bbd4824mj9d6vp65b6n400000003u000000000muk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144841Z-1657d5bbd48jwrqbupe3ktsx9w00000003t000000000t5xb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:41 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144841Z-1657d5bbd482krtfgrg72dfbtn00000003c000000000ffau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd482tlqpvyz9e93p5400000003n000000000unb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd48f7nlxc7n5fnfzh0000000034g00000000zwtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd48sdh4cyzadbb374800000003eg00000000kgy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd48xsz2nuzq4vfrzg800000003bg00000000zu3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3a04fc40-501e-007b-3b73-175ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd482lxwq1dp2t1zwkc0000000380000000010ssq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:42 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd48f7nlxc7n5fnfzh0000000038000000000mrc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:42 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:42 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144842Z-1657d5bbd48f7nlxc7n5fnfzh0000000038000000000mrcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144843Z-1657d5bbd48qjg85buwfdynm5w00000003p000000000ts5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144843Z-1657d5bbd487nf59mzf5b3gk8n000000036g00000000ruat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 52963dc7-601e-0084-0e74-176b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144843Z-1657d5bbd482krtfgrg72dfbtn00000003cg00000000d5bf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144843Z-1657d5bbd48tqvfc1ysmtbdrg000000003eg00000000q0te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144843Z-1657d5bbd48dfrdj7px744zp8s00000003bg00000000ma9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:43 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:43 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144843Z-1657d5bbd48vlsxxpe15ac3q7n00000003ng00000000bsw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:43 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:44 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144844Z-1657d5bbd48xlwdx82gahegw4000000003vg00000000azty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:44 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6dc6331d-801e-0047-0866-177265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144844Z-1657d5bbd48xlwdx82gahegw4000000003qg0000000116rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:44 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:44 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144844Z-1657d5bbd482krtfgrg72dfbtn000000039000000000ugne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:44 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:44 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:44 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144844Z-1657d5bbd48xdq5dkwwugdpzr000000003y000000000hg4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:44 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:45 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:45 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4d5cca78-701e-0021-6ae5-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144845Z-1657d5bbd48sdh4cyzadbb374800000003hg000000004kdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:45 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:45 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144845Z-1657d5bbd48tnj6wmberkg2xy800000003kg000000010dhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:45 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:45 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:45 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144845Z-1657d5bbd48vlsxxpe15ac3q7n00000003qg0000000032aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:45 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:45 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:45 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144845Z-1657d5bbd48cpbzgkvtewk0wu000000003tg0000000046qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:45 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144845Z-1657d5bbd48cpbzgkvtewk0wu000000003kg000000011azx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:45 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144845Z-1657d5bbd482krtfgrg72dfbtn00000003ag00000000p11e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd48gqrfwecymhhbfm800000002k00000000009yx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd48cpbzgkvtewk0wu000000003u0000000001rny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd482lxwq1dp2t1zwkc00000003c000000000k16v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd48t66tjar5xuq22r800000003kg00000000pggp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd48qjg85buwfdynm5w00000003sg0000000099n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd482tlqpvyz9e93p5400000003r000000000emkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:46 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144846Z-1657d5bbd48qjg85buwfdynm5w00000003u00000000027yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:47 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:47 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: c326dec7-201e-0003-0c12-17f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144847Z-1657d5bbd48vhs7r2p1ky7cs5w00000003yg00000000e89b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:47 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:47 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:47 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 87e265fd-201e-0051-4fe7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144847Z-1657d5bbd48gqrfwecymhhbfm800000002d000000000r3xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:47 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:47 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:47 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cad35e9e-b01e-0021-3602-17cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144847Z-1657d5bbd48762wn1qw4s5sd3000000003c0000000010xf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:47 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:47 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:47 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 75ef523f-601e-000d-02f2-162618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144847Z-1657d5bbd48wd55zet5pcra0cg00000003k000000000npr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:47 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:48 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c9f5e5fc-201e-0071-5dfe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144848Z-1657d5bbd482krtfgrg72dfbtn00000003a000000000rgyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:48 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3e7839e3-701e-0053-5cff-163a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144848Z-1657d5bbd48f7nlxc7n5fnfzh0000000037000000000r5qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 20e89b60-501e-008c-3a03-17cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144849Z-1657d5bbd48sdh4cyzadbb374800000003dg00000000qw4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:49 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c7b470af-b01e-005c-24fe-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144849Z-1657d5bbd48q6t9vvmrkd293mg00000003fg00000000yzyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:49 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: dfa7567c-f01e-003f-67de-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144849Z-1657d5bbd48brl8we3nu8cxwgn00000003zg000000009nsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:49 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 838d7376-001e-0014-17fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144849Z-1657d5bbd48qjg85buwfdynm5w00000003qg00000000m5b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:49 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49859	172.67.200.174	443	8848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	689	OUT	GET /iway/bGVnYWxAZ3J1Ymh1Yi5jb20= HTTP/1.1 Host: laicrt0920.kt8.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:48:49 UTC	612	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Express CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MA2gON7JkX5JIH5Gtv9a6v8QBoD9LrDGFAmOVmu50CmNttKVboKUs64q6FIQrvlh6W6mahpdpBvpU5o50etRHSVtOYEwSYB3GCqtXgmybXDpWTaAAP1yJ8Edq1FBogJZ5j%2BV1w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ceeb1bd287fde94-EWR
2024-10-07 14:48:49 UTC	757	IN	Data Raw: 31 33 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 65 63 75 72 65 20 41 63 63 65 73 73 20 50 6f 72 74 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 74 72 61 6e 73 6c 61 74 65 5f 61 2f 65 6c 65 6d 65 6e 74 2e 6a 73 3f 63 62 3d 67 6f 6f 67 6c 65 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 Data Ascii: 13a0<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Secure Access Portal</title> <link rel="stylesheet" href="/css/style.css"> <script src="https://translate.google.com/translate_a/element.js?cb=googleTranslateEleme
2024-10-07 14:48:49 UTC	1369	IN	Data Raw: 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 22 20 76 61 6c 75 65 3d 22 6c 65 67 61 6c 40 67 72 75 62 68 75 62 2e 63 6f 6d 22 20 72 65 71 75 69 72 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 6e 65 78 74 2d 62 74 6e 22 20 6f 6e 63 6c 69 63 6b 3d 22 73 68 6f 77 50 61 73 73 77 6f 72 64 49 6e 70 75 74 28 29 22 3e 4e 65 78 74 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <input type="email" id="email" name="email" placeholder="Enter your email" value="legal@grubhub.com" required> <button type="button" class="next-btn" onclick="showPasswordInput()">Next</button> </div>
2024-10-07 14:48:49 UTC	1369	IN	Data Raw: 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 6c 6f 67 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 6f 6f 67 6c 65 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 49 6e 69 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 67 6f 6f 67 6c 65 2e 74 72 61 6e 73 6c 61 74 65 2e 54 72 61 6e 73 6c 61 74 65 45 6c 65 6d 65 6e 74 28 7b 70 61 67 65 4c 61 6e 67 75 61 67 65 3a 20 27 65 6e 27 7d 2c 20 27 67 6f 6f 67 6c 65 5f 74 72 61 6e 73 6c 61 74 65 5f 65 6c 65 6d 65 6e 74 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 Data Ascii: ript src="js/login.js"></script> <script> function googleTranslateElementInit() { new google.translate.TranslateElement({pageLanguage: 'en'}, 'google_translate_element'); } document.addEventListener('DOMContentLoad
2024-10-07 14:48:49 UTC	1369	IN	Data Raw: 49 64 28 27 70 61 73 73 77 6f 72 64 53 65 63 74 69 6f 6e 27 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 68 69 64 64 65 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 64 69 73 70 6c 61 79 54 65 78 74 45 6d 61 69 6c 27 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 65 6d 61 69 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6e 6f 74 69 63 65 27 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 22 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 20 70 61 73 73 77 6f 72 64 20 74 6f 20 63 6f 6e 74 69 6e 75 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 Data Ascii: Id('passwordSection').classList.remove('hidden'); document.getElementById('displayTextEmail').textContent = email; document.getElementById('notice').textContent = "Enter your email password to continue"; } else
2024-10-07 14:48:49 UTC	168	IN	Data Raw: 3a 27 2c 20 65 72 72 6f 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6e 6f 74 69 63 65 27 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 64 75 72 69 6e 67 20 6c 6f 67 69 6e 2e 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: :', error); document.getElementById('notice').textContent = "An error occurred during login."; }); } </script></body></html>
2024-10-07 14:48:49 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-10-07 14:48:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7d18055e-701e-0098-56ff-16395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144849Z-1657d5bbd48jwrqbupe3ktsx9w00000003v000000000f5fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:49 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:49 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 770fdf22-501e-0035-0d02-17c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144849Z-1657d5bbd48sdh4cyzadbb374800000003dg00000000qw5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c55b1dc3-701e-0097-42e9-16b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144850Z-1657d5bbd4824mj9d6vp65b6n400000003ug00000000hnqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4543d13f-701e-0050-5a04-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144850Z-1657d5bbd48t66tjar5xuq22r800000003q0000000003kh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: fba86ca6-e01e-00aa-5200-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144850Z-1657d5bbd482krtfgrg72dfbtn000000039000000000uh3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	49868	172.217.18.14	443	8848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	658	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://laicrt0920.kt8.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:48:50 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 07 Oct 2024 14:48:50 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CNEC; Domain=.google.com; Expires=Sat, 05-Apr-2025 14:48:50 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 14:48:50 UTC	645	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6c 62 2c 6f 62 2c 70 62 2c 71 62 2c 77 2c 73 62 2c 74 62 2c 76 62 2c 77 62 2c 78 62 2c 7a 62 2c 44 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 Data Ascii: Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,lb,ob,pb,qb,w,sb,tb,vb,wb,xb,zb,Db;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 Data Ascii: (c){return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 62 3b 76 61 72 20 63 2c 64 3b 62 3d 28 64 3d 28 63 3d 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 62 3f 62 2e 64 6f 63 75 6d 65 6e 74 3a 62 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 Data Ascii: guments.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){b=b===void 0?document:b;var c,d;b=(d=(c="document"in b?b.document:b).querySelector)==null?void
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 72 6e 20 61 7d 3b 0a 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 72 62 3d 71 62 28 74 Data Ascii: rn a};qb=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.rb=qb(t
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6f 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 Data Ascii: return a};_.y=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ob(a)};throw Error("d`"+String(a));};_.ub=function(a){if(!(a instanceof Array)){a=_.y(a);for(var
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 62 3d 7a 62 3b 0a 5f 2e 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 78 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 44 62 29 44 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 Data Ascii: b=zb;_.z=function(a,b){a.prototype=xb(b.prototype);a.prototype.constructor=a;if(Db)Db(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.p
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 68 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 6d 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c Data Ascii: is.o(new TypeError("h"));else if(g instanceof e)this.ma(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6d 28 71 28 75 29 29 7d 63 61 74 63 68 28 42 29 7b 6e 28 42 29 7d 7d 3a 72 7d 76 61 72 20 6d 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 71 2c 72 29 7b 6d 3d 71 3b 6e 3d 72 7d 29 3b 74 68 69 73 2e 4e 64 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 Data Ascii: ="function"?function(u){try{m(q(u))}catch(B){n(B)}}:r}var m,n,p=new e(function(q,r){m=q;n=r});this.Nd(l(g,m),l(h,n));return p};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);br
2024-10-07 14:48:50 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 Data Ascii: )return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}cat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	49871	172.67.200.174	443	8848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	575	OUT	GET /css/style.css HTTP/1.1 Host: laicrt0920.kt8.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:48:50 UTC	696	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 1997 Connection: close X-Powered-By: Express Cache-Control: public, max-age=14400 Last-Modified: Tue, 03 Sep 2024 10:57:30 GMT ETag: W/"7cd-191b7885469" CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SUzOGDNn6ZC%2BcDXbZN14UWMijXUvCUAiMSEG00ONLTkvfpb8rX6%2FCQGU9maLMNXIFkIOufMEWUFUF7sPmk9r04kcEjFo%2FPnI5ToFO7fHUlV5FvQptVquaadNJ7rFHUNdqVjhbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ceeb1c4ff024262-EWR
2024-10-07 14:48:50 UTC	673	IN	Data Raw: 62 6f 64 79 2c 20 68 74 6d 6c 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 65 67 6f 65 20 55 49 27 2c 20 54 61 68 6f 6d 61 2c 20 47 65 6e 65 76 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 32 66 35 3b 0a 7d 0a 0a 2e 68 65 61 64 65 72 20 Data Ascii: body, html { height: 100%; margin: 0; display: flex; flex-direction: column; justify-content: center; align-items: center; font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background-color: #f0f2f5;}.header
2024-10-07 14:48:50 UTC	1324	IN	Data Raw: 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 34 30 70 78 29 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 Data Ascii: size: 1.5rem;}input[type="email"], input[type="password"] { width: calc(100% - 40px); padding: 10px; margin: 10px 20px; border-radius: 8px;}button { padding: 10px 20px; border: none; background-image: linear-gradient(to r

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 961c0255-701e-005c-1406-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144850Z-1657d5bbd48q6t9vvmrkd293mg00000003f00000000108vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	49873	172.67.200.174	443	8848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	623	OUT	GET /images/logo.png HTTP/1.1 Host: laicrt0920.kt8.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:48:51 UTC	681	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: image/png Content-Length: 7231 Connection: close X-Powered-By: Express Cache-Control: public, max-age=14400 Last-Modified: Fri, 19 Apr 2024 19:44:46 GMT ETag: W/"1c3f-18ef7e3cfb0" CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RjC5g%2Bv2zVp1QXbCeqrmNG%2FXYST2QuNrrELjmUWXkdlkXzaQlzHn2DzVcdlzFxZss1sCgQ4gBg74yMMkaRAo8t6M50MFrwxQHOjo24W4G6yuV19IgBhHgsAFF1YGuY29kqPNEw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ceeb1c558874339-EWR
2024-10-07 14:48:51 UTC	688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3a 00 00 00 41 08 06 00 00 00 80 5e b7 2a 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 04 14 09 27 0f 59 93 c1 3c 00 00 1b b5 49 44 41 54 68 de c5 9b 69 b4 64 55 95 e7 7f fb dc 1b c3 8b 37 4f f9 72 86 24 19 72 80 84 64 10 12 28 40 05 05 e7 d9 c2 52 29 6d bb b4 57 d9 bd aa 6b e8 ee 72 d9 da 5d 96 da 52 0b 5d 4a 59 94 43 15 94 88 f4 72 c0 b1 64 70 c0 64 90 94 94 31 49 92 24 07 32 c9 f9 e5 f0 e6 f7 22 e2 9e 73 76 7f 38 e7 de 88 97 d0 5d f6 27 63 ad 78 ef 45 c4 8d 73 cf 3e 7b ef ff de fb bf f7 13 7e 8f 8f cc 5a d2 24 a9 3c b9 6b cf 67 Data Ascii: PNGIHDR:A^* cHRMz&u0`:pQ<bKGDtIME'Y<IDAThidU7Or$rd(@R)mWkr]R]JYCrdpd1I$2"sv8]'cxEs>{~Z$<kg
2024-10-07 14:48:51 UTC	1369	IN	Data Raw: 6e 42 0d 15 c0 23 28 aa 51 8d 6d ca d3 96 1d 44 ed e5 42 86 0b 25 1e 86 0a 85 d0 06 03 1e 50 8f 00 56 0c f5 7c 6d 11 86 7a bb c0 3b 30 a0 7b 0e d0 bc fb d7 94 5e 7b 39 7e b0 07 f1 ad 83 b5 60 54 a8 21 72 ea 0c 72 ea 98 98 37 9e 90 e6 f7 16 91 7d 46 b6 1d da fe 8f 7b 76 f2 91 53 4f 0f 87 02 f0 e9 fd 47 f9 8b 83 63 bc 7e f1 89 2b 77 65 fa ad 63 96 eb 1b 56 6b de 2a de 39 d4 7b d4 2b a2 82 68 90 c2 c7 a7 e6 22 6a 61 ce c5 21 84 d7 1a 3f f7 04 05 0a c1 2d c3 77 f0 84 d7 be 65 0f 46 04 bc 82 0b 07 a5 7b 0e d1 b8 ef 61 38 3a 86 f3 1e 67 1d ce 3a 7c fe 3b 73 58 eb 98 b3 ae f3 88 f5 ef df e9 92 3b af 13 b9 f4 23 13 ca 67 f7 ec 09 1a dd 38 31 c6 87 0f 8c f1 86 9e fe 4b f6 65 7a cb ac d5 d5 8a 06 0d a4 80 24 78 eb 50 e7 10 af 27 69 b1 70 ea a0 49 24 98 a8 80 04 33 Data Ascii: nB#(QmDB%PV\|mz;0{^{9~`T!rr7}F{vSOGc~+wecVk*9{+h"ja!?-weF{a8:g:\|;sX;#g81Kez$xP'ipI$3
2024-10-07 14:48:51 UTC	1369	IN	Data Raw: 48 94 c2 04 45 c1 48 4c df 10 54 94 31 ab fc a4 3e cd a3 e3 33 7c 70 61 2f 1f 5c 3c 40 4f 92 86 83 03 ac 7a 8e 65 96 ba 0f df 49 44 19 2a a7 54 24 41 44 30 c6 a0 dd fd 68 e6 f1 de a3 99 43 92 88 de 62 50 15 93 aa f7 aa 22 e0 42 12 1d 80 c0 a3 2e 20 5f 7b c6 72 c7 fe 51 be 76 60 0c c5 e0 51 ba 8d e1 d3 67 2e e2 b2 81 6e 40 d9 5f 6f f2 5f 77 1c e2 9e 13 73 08 82 d1 93 43 43 ab ac d3 dc 1a 62 29 64 10 46 33 e1 a6 3d 27 38 56 b7 fc 97 d3 46 e8 49 12 10 e1 c9 c9 19 3e be fd 00 63 36 1c 50 09 e5 2f 56 8c f0 96 45 43 c5 ca ce 7b 7c ad 07 63 4a a8 f5 28 06 e3 43 46 a6 aa 92 7a 8f 7a 34 bc e9 43 8e 29 31 cb c0 b5 95 14 08 83 e5 84 a5 95 04 a7 06 41 e9 4e 12 3a d3 e0 43 13 99 e3 6f 77 1c e2 ee 23 d3 c1 3f 74 3e 5a 06 58 f0 f8 08 62 46 da 81 4c f0 f1 77 13 b8 75 ff Data Ascii: HEHLT1>3\|pa/\<@OzeID*T$AD0hCbP"B. _{rQv`Qg.n@_o_wsCCb)dF3='8VFI>c6P/VEC{\|cJ(CFzz4C)1AN:Cow#?t>ZXbFLwu
2024-10-07 14:48:51 UTC	1369	IN	Data Raw: 45 ff 3c 30 d2 98 07 58 b0 8a 24 11 8c 6c 48 16 14 21 55 9b a1 5e 10 eb 10 6b a3 09 c7 2f 79 d7 56 cd 43 c5 18 16 75 94 5b 1b 88 37 fa c0 85 2b d9 b4 ed 00 33 0d 0f 51 48 11 c1 88 e1 e8 98 e5 eb 0f ed e0 5b 8f ee 66 41 57 85 15 03 9d 9c 32 dc cd 59 c3 bd 9c 39 dc c7 f2 81 4e 86 3a ab 74 94 52 16 75 a6 f3 c4 3c 49 ca 36 c1 95 97 98 86 cd f7 ed 31 d6 a3 26 10 db 2a a1 70 48 4d 66 49 9c 20 2e 26 08 de 22 ce 62 bc 43 da 7c 54 50 8e d7 33 76 9c 98 a1 e9 43 f2 df 55 4e 58 3b d4 cd 55 67 2c e1 dd e7 af e0 9f 1f dc 86 1a 13 4f 3e 70 ad b9 bf cd da 8c 17 66 ea ec 3e 32 8e 7f 4e 28 99 84 ce 4a c2 70 67 85 e5 43 5d ac 5d d8 cf 25 2b 46 78 c5 29 c3 f4 d7 2a 2d d0 12 25 73 9e ed c7 27 39 32 db 00 84 52 22 9c 3d dc cb 40 b5 12 2f d1 56 94 b0 19 6a 0c 9a 04 7f 0d 31 df Data Ascii: E<0X$lH!U^k/yVCu[7+3QH[fAW2Y9N:tRu<I61&pHMfI .&"bC\|TP3vCUNX;Ug,O>pf>2N(JpgC]]%+Fx)-%s'92R"=@/Vj1
2024-10-07 14:48:51 UTC	1369	IN	Data Raw: 18 f5 ad fe 8e 46 4e d8 18 c3 b3 cf 56 f9 dc fd 96 ba 0d 11 23 90 ba 84 70 29 06 c1 91 62 ad 62 3d aa d1 be 91 50 c4 7a 47 d5 28 e7 8f f4 b2 7c d1 20 aa 81 a8 6c 9f 48 49 8c 50 9e 3b 85 db ab 29 93 53 73 45 13 58 04 26 4f 1c e7 d0 fe 83 bc e9 a2 55 05 c9 d6 8e 9c 5a 68 4c 99 ae 37 b8 ef d7 4f 93 35 eb 24 26 29 e2 b3 f7 ca e2 fe 61 ae 3e 6b 29 43 bd 9d f3 88 ba fc 50 4b 89 70 64 cb 1c 59 7d 36 b8 88 b5 91 b4 d6 a8 5d 01 35 18 6c 26 e2 02 62 05 be 28 a4 7f e2 1d c6 2b d6 2b d6 7b 9c 0f fd 51 2d 88 21 b0 aa 9c ba 68 01 ab 97 8d e0 b3 2c f4 34 e3 d3 37 33 fe e5 fb f7 f3 c0 63 cf a2 12 5d 3f 4c 7f 61 9d c7 f9 50 d4 ab 57 be 73 cf af d9 b8 e9 69 92 3c 57 75 c1 ba d4 66 9c 77 e6 52 ba 3b 6b 64 56 c9 5c be 9f b8 27 55 a6 1b 19 f7 3f bc 19 db 6c c4 58 1a cc 57 6c Data Ascii: FNV#p)bb=PzG(\| lHIP;)SsEX&OUZhL7O5$&)a>k)CPKpdY}6]5l&b(++{Q-!h,473c]?LaPWsi<WufwR;kdV\'U?lXWl
2024-10-07 14:48:51 UTC	1067	IN	Data Raw: 0f af 39 e7 54 ae 5a 7d 4a 3e 40 59 80 89 c6 42 b9 94 08 ce b5 a1 6a bc a9 7f 49 bd fa 52 96 20 31 c2 d8 c4 14 b7 7c ed 1b bc b0 77 7f 4b 93 68 01 40 2d f0 cb 51 5a 68 a3 ef 30 49 39 86 ca 38 48 8d 22 62 30 52 9a 31 e5 34 3d 92 a7 5c 79 ec 44 3d 49 62 98 9e a9 73 f7 cf 1f a6 d1 0c dc 8b 7a 48 8d 50 16 a1 6c 84 d4 18 52 63 28 9b d0 f0 f5 3e cf a8 34 30 fa 71 a0 59 bd e6 c3 ff f1 fd 56 22 a2 84 5e cd be 83 47 b9 e9 e6 af f3 c0 43 bf 89 b1 36 4e 6b 4b 2b 13 ca 55 28 04 00 6a c7 7f 31 09 26 4d 41 5d 40 15 ef 62 2b d4 61 9b 8d f1 d4 a0 4f 8a f3 97 e6 f6 5e 64 1f 22 24 a5 94 1f dd bb 91 c1 a1 7e de f1 86 d7 d2 d3 d3 1d 89 ad a8 35 cd 47 e5 c2 28 9a 29 2a c9 f6 4a a5 35 82 de c6 0c 01 e0 9c 63 f4 d8 09 1e 7e f4 29 7e f8 af f7 b1 ed 99 ad a1 36 ce eb 13 89 63 e9 Data Ascii: 9TZ}J>@YBjIR 1\|wKh@-QZh0I98H"b0R14=\yD=IbszHPlRc(>40qYV"^GC6NkK+U(j1&MA]@b+aO^d"$~5G()*J5c~)~6c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	49872	172.67.200.174	443	8848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	610	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: laicrt0920.kt8.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://laicrt0920.kt8.co/iway/bGVnYWxAZ3J1Ymh1Yi5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:48:50 UTC	762	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Tue, 01 Oct 2024 14:50:16 GMT ETag: "66fc0c28-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x186iZo2wE80%2FeTe2KWN39%2Bd%2F4xI0YWH6e%2FeyV0B390%2Bi1P45RVszWL0LW2lJBVBmyFL3pTQ7tV6b2WfDj%2BOHJZBiwpYvOT5TfDrJ74b5SwbHeKAeRcbdyVS9oAVZznqx4qCtw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ceeb1c54cc8c34a-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 09 Oct 2024 14:48:50 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	607	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-10-07 14:48:50 UTC	632	IN	Data Raw: 3a 22 2b 6e 28 6f 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f Data Ascii: :"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){fo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:50 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 401481e1-301e-0099-6a5a-176683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144850Z-1657d5bbd48xsz2nuzq4vfrzg800000003fg00000000kf7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:52 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:52 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 5ab3c245-a01e-0032-4da2-181949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144852Z-1657d5bbd48hzllksrq1r6zsvs00000000ug00000000n9t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:52 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	49881	142.250.185.110	443	8848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:52 UTC	481	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:48:52 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 07 Oct 2024 14:48:52 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CK4F; Domain=.google.com; Expires=Sat, 05-Apr-2025 14:48:52 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 14:48:52 UTC	645	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6c 62 2c 6f 62 2c 70 62 2c 71 62 2c 77 2c 73 62 2c 74 62 2c 76 62 2c 77 62 2c 78 62 2c 7a 62 2c 44 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 Data Ascii: Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,lb,ob,pb,qb,w,sb,tb,vb,wb,xb,zb,Db;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 Data Ascii: (c){return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 62 3b 76 61 72 20 63 2c 64 3b 62 3d 28 64 3d 28 63 3d 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 62 3f 62 2e 64 6f 63 75 6d 65 6e 74 3a 62 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 Data Ascii: guments.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){b=b===void 0?document:b;var c,d;b=(d=(c="document"in b?b.document:b).querySelector)==null?void
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 72 6e 20 61 7d 3b 0a 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 72 62 3d 71 62 28 74 Data Ascii: rn a};qb=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.rb=qb(t
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6f 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 Data Ascii: return a};_.y=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ob(a)};throw Error("d`"+String(a));};_.ub=function(a){if(!(a instanceof Array)){a=_.y(a);for(var
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 62 3d 7a 62 3b 0a 5f 2e 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 78 62 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 44 62 29 44 62 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 Data Ascii: b=zb;_.z=function(a,b){a.prototype=xb(b.prototype);a.prototype.constructor=a;if(Db)Db(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.p
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 68 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 6d 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c Data Ascii: is.o(new TypeError("h"));else if(g instanceof e)this.ma(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6d 28 71 28 75 29 29 7d 63 61 74 63 68 28 42 29 7b 6e 28 42 29 7d 7d 3a 72 7d 76 61 72 20 6d 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 71 2c 72 29 7b 6d 3d 71 3b 6e 3d 72 7d 29 3b 74 68 69 73 2e 4e 64 28 6c 28 67 2c 6d 29 2c 6c 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 Data Ascii: ="function"?function(u){try{m(q(u))}catch(B){n(B)}}:r}var m,n,p=new e(function(q,r){m=q;n=r});this.Nd(l(g,m),l(h,n));return p};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);br
2024-10-07 14:48:52 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 Data Ascii: )return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}cat

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:48:52 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:48:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:48:52 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 9139889b-001e-0079-22f3-1612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T144852Z-1657d5bbd48vhs7r2p1ky7cs5w00000003ug00000000xv1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:48:52 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Acrobat.exePID: 7448, Parent PID: 4056

General

Target ID:	0
Start time:	10:48:21
Start date:	07/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\8ID0109FLT24PO92CD-R.pdf"
Imagebase:	0x7ff702560000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 7672, Parent PID: 7448

General

Target ID:	2
Start time:	10:48:21
Start date:	07/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6c3ff0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 7848, Parent PID: 7672

General

Target ID:	4
Start time:	10:48:22
Start date:	07/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1372,i,2033657756127450865,12014343967480728065,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6c3ff0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 8620, Parent PID: 4560

General

Target ID:	11
Start time:	12:25:47
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://laiCRT0920.Kt8.cO/iway/bGVnYWxAZ3J1Ymh1Yi5jb20="
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 8848, Parent PID: 8620

General

Target ID:	12
Start time:	12:25:48
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2240,i,22978064906452545,7602595374261446839,262144 /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly