Edit tour

Windows Analysis Report
https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7

Overview

General Information

Sample URL:	https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7
Analysis ID:	1531080
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1996,i,10796994837371827411,2708721533245210862,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7

HTTP Parser: Number of links: 1

Source: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7

HTTP Parser: <input type="password" .../> found

Source: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7	HTTP Parser: No <meta name="author".. found
Source: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7	HTTP Parser: No <meta name="author".. found

Source: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7	HTTP Parser: No <meta name="copyright".. found
Source: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:60208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:60210 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:62458 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:60205 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:52511 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /register/Xo7ehwav33TcneRvnq7 HTTP/1.1Host: darwynnfulfillment.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b1f64384ab5de640.js HTTP/1.1Host: assets7.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css HTTP/1.1Host: assets10.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/common-284ce6b5922f3ee12731a4050ae7092884cde90a2c5a11a7a52e206e8d37d41b.css HTTP/1.1Host: assets1.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/frameworks-f591442b919f150f5c0b50e1012a34829e8a6ae061cdc17eb1c2cda99e8baf68.js HTTP/1.1Host: assets2.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1Host: assets8.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZVAlJh7qH3kuFxlIk0Jf-xB-Clir31is5w.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T132508Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=674e0ee39d0c749457254fc6f216460c8583d272046a8cd6eab3a0def0dd0998 HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/strftime-min.js?1728540009 HTTP/1.1Host: darwynnfulfillment.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _helpkit_session=N05ZZmNZdEluWUtWcmFpYTI5UmNsSStoQkVqM0MwZTcrQlVXcGQ3a3F1b0VML0w2bnJWR0ZHQnJScjJsMVJMYjVDSmpLNWpkVlo2eTdVNmcxeWFqMjBPOFgyTTVTNlRYZW9FaUQvdGdQcnFDUHMveWZ1SjhEb2ZlMzU2b25WeWhPcXpnaG9FdjVpNmoweFgzTEdWTkI4dE5SVDY3SmJneExsOElZbk4vMHkrdFAxaDNXcWE1NnB3UUJrcmpaWWE3LS1VV2pDa0tJK0ZZNTZKb0sweFc4elV3PT0%3D--5b5306ddac994d5b1371b468fed17ffba7a5b6b6
Source: global traffic	HTTP traffic detected: GET /assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b1f64384ab5de640.js HTTP/1.1Host: assets7.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1Host: assets8.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/frameworks-f591442b919f150f5c0b50e1012a34829e8a6ae061cdc17eb1c2cda99e8baf68.js HTTP/1.1Host: assets2.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZVAlJh7qH3kuFxlIk0Jf-xB-Clir31is5w.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T132508Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=674e0ee39d0c749457254fc6f216460c8583d272046a8cd6eab3a0def0dd0998 HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/strftime-min.js?1728540009 HTTP/1.1Host: darwynnfulfillment.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _helpkit_session=UTdsWmN1bDZLV0s0SWU3NFZVMnNOQjc5RlVqSWg4MmxHSm55MEF4OW5DTU56aUF2aTNCUWV0OWE2OEQrcDdaM0FUcnR3VzdINTBQYlQwcUZHdVFUZVNJRUNsaWEyTWNjSll3UTZhSUVUMDlJMVFtK2J0RklKNnRJaSt0THlGcHA5NVBvMTN4Sk5DS3Bna0pXRUlLeURDUHpjTkFYaXFkM3d0bU9FY2pmMzRXUUVwcmlrcUpGbEpBUmQ0VFJJbW9aLS1SWW8vNWZGTE1aOFFCaU1OQjRXVjZ3PT0%3D--73a01056bb3367c16f7028a1b436995e250ce9a7
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_icon/FySB4N0Dof4unBE7hZXBHx8yOpu64TWbMw.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://darwynnfulfillment.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_icon/FySB4N0Dof4unBE7hZXBHx8yOpu64TWbMw.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: darwynnfulfillment.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets1.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets10.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets8.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets2.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets7.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_121.2.dr, chromecache_131.2.dr	String found in binary or memory: http://jquery.org/license
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: chromecache_137.2.dr	String found in binary or memory: https://assets1.freshdesk.com/assets/cdn/common-284ce6b5922f3ee12731a4050ae7092884cde90a2c5a11a7a52e
Source: chromecache_137.2.dr	String found in binary or memory: https://assets10.freshdesk.com/assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f
Source: chromecache_137.2.dr	String found in binary or memory: https://assets2.freshdesk.com/assets/cdn/frameworks-f591442b919f150f5c0b50e1012a34829e8a6ae061cdc17e
Source: chromecache_137.2.dr	String found in binary or memory: https://assets5.freshdesk.com
Source: chromecache_137.2.dr	String found in binary or memory: https://assets7.freshdesk.com/assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b
Source: chromecache_137.2.dr	String found in binary or memory: https://assets8.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: chromecache_137.2.dr	String found in binary or memory: https://darwynnfulfillment.freshdesk.com/support/home
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: chromecache_137.2.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZV
Source: chromecache_137.2.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_ico
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 62567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 62521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62503
Source: unknown	Network traffic detected: HTTP traffic on port 62504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60209
Source: unknown	Network traffic detected: HTTP traffic on port 62464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60208
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62501
Source: unknown	Network traffic detected: HTTP traffic on port 62483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62482
Source: unknown	Network traffic detected: HTTP traffic on port 62519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62476
Source: unknown	Network traffic detected: HTTP traffic on port 60230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62477
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62492
Source: unknown	Network traffic detected: HTTP traffic on port 62537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62493
Source: unknown	Network traffic detected: HTTP traffic on port 62543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62486
Source: unknown	Network traffic detected: HTTP traffic on port 62502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62487
Source: unknown	Network traffic detected: HTTP traffic on port 60218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62488
Source: unknown	Network traffic detected: HTTP traffic on port 62466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62489
Source: unknown	Network traffic detected: HTTP traffic on port 62542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62494
Source: unknown	Network traffic detected: HTTP traffic on port 62536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62497
Source: unknown	Network traffic detected: HTTP traffic on port 62559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 62482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 62520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 62570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 60212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 62473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62557
Source: unknown	Network traffic detected: HTTP traffic on port 62496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62559
Source: unknown	Network traffic detected: HTTP traffic on port 62576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62550
Source: unknown	Network traffic detected: HTTP traffic on port 62501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62553
Source: unknown	Network traffic detected: HTTP traffic on port 60211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62555
Source: unknown	Network traffic detected: HTTP traffic on port 62467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62556
Source: unknown	Network traffic detected: HTTP traffic on port 60228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62570
Source: unknown	Network traffic detected: HTTP traffic on port 62490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62568
Source: unknown	Network traffic detected: HTTP traffic on port 62506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62560
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62562
Source: unknown	Network traffic detected: HTTP traffic on port 62558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62563
Source: unknown	Network traffic detected: HTTP traffic on port 62462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62564
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62567
Source: unknown	Network traffic detected: HTTP traffic on port 60227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62460
Source: unknown	Network traffic detected: HTTP traffic on port 62513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62459
Source: unknown	Network traffic detected: HTTP traffic on port 62472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62571
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62576
Source: unknown	Network traffic detected: HTTP traffic on port 62484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62470
Source: unknown	Network traffic detected: HTTP traffic on port 62541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62471
Source: unknown	Network traffic detected: HTTP traffic on port 62518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62469
Source: unknown	Network traffic detected: HTTP traffic on port 62529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62461
Source: unknown	Network traffic detected: HTTP traffic on port 62489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62467
Source: unknown	Network traffic detected: HTTP traffic on port 60216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62468
Source: unknown	Network traffic detected: HTTP traffic on port 62540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60213
Source: unknown	Network traffic detected: HTTP traffic on port 62505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62517
Source: unknown	Network traffic detected: HTTP traffic on port 62557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62519
Source: unknown	Network traffic detected: HTTP traffic on port 62528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60217
Source: unknown	Network traffic detected: HTTP traffic on port 62486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60216
Source: unknown	Network traffic detected: HTTP traffic on port 62480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62511
Source: unknown	Network traffic detected: HTTP traffic on port 60215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62512
Source: unknown	Network traffic detected: HTTP traffic on port 62568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62529
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60226
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62523
Source: unknown	Network traffic detected: HTTP traffic on port 62517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60230
Source: unknown	Network traffic detected: HTTP traffic on port 62551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62533
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62534
Source: unknown	Network traffic detected: HTTP traffic on port 60226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62546
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62547
Source: unknown	Network traffic detected: HTTP traffic on port 60237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62549
Source: unknown	Network traffic detected: HTTP traffic on port 62556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62544
Source: unknown	Network traffic detected: HTTP traffic on port 62468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62545

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:60208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:60210 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_5928_1128280545

Jump to behavior

Source: classification engine

Classification label: clean2.win@22/34@30/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1996,i,10796994837371827411,2708721533245210862,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1996,i,10796994837371827411,2708721533245210862,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
darwynnfulfillment.freshdesk.com	54.85.43.134	true	false	unknown
assets8.freshdesk.com	52.222.225.5	true	false	unknown
s3.amazonaws.com	3.5.21.134	true	false	unknown
assets7.freshdesk.com	52.222.225.5	true	false	unknown
assets10.freshdesk.com	52.222.225.5	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
assets2.freshdesk.com	52.222.225.5	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
assets1.freshdesk.com	18.239.81.5	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://assets7.freshdesk.com/assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b1f64384ab5de640.js	false	unknown
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_icon/FySB4N0Dof4unBE7hZXBHx8yOpu64TWbMw.png	false	unknown
https://assets8.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://assets7.freshdesk.com/assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b	chromecache_137.2.dr	false		unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://assets5.freshdesk.com	chromecache_137.2.dr	false		unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZV	chromecache_137.2.dr	false		unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
52.222.225.5	assets8.freshdesk.com	United States	16509	AMAZON-02US	false
54.85.43.134	darwynnfulfillment.freshdesk.com	United States	14618	AMAZON-AESUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
3.5.21.134	s3.amazonaws.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.217.140.136	unknown	United States	16509	AMAZON-02US	false
18.245.195.5	unknown	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.239.81.5	assets1.freshdesk.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531080
Start date and time:	2024-10-10 20:27:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/34@30/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.206, 142.250.184.227, 64.233.184.84, 34.104.35.123, 142.250.186.42, 142.250.184.202, 142.250.185.138, 142.250.185.74, 172.217.23.106, 172.217.18.10, 142.250.185.106, 216.58.206.42, 172.217.18.106, 142.250.186.170, 142.250.186.138, 216.58.212.138, 172.217.16.202, 142.250.185.202, 216.58.206.74, 142.250.186.106, 20.12.23.50, 93.184.221.240, 192.229.221.95, 20.3.187.198, 13.85.23.206, 13.95.31.18, 142.250.186.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7 Model: jbxai	{ "brands":["Darwynn"], "text":"Darwynn Fulfillment", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"ACTIVATE AND LOG IN", "text_input_field_labels":["Full name", "Enter Password", "Retype Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7 Model: jbxai	{ "brands":["Darwynn"], "text":"Darwynn Fulfillment", "contains_trigger_text":true, "trigger_text":"ACTIVATE AND LOG IN", "prominent_button_name":"ACTIVATE AND LOG IN", "text_input_field_labels":["Full name", "Enter Password", "Retype Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7 Model: jbxai	{ "phishing_score":3, "brands":"Darwynn", "legit_domain":"darwynn.com", "classification":"unknown", "reasons":["The URL 'darwynnfulfillment.freshdesk.com' uses 'freshdesk.com', which is a legitimate domain associated with Freshdesk, a customer support software.", "The subdomain 'darwynnfulfillment' suggests it might be a customer or a specific service related to Darwynn using Freshdesk's platform.", "The brand 'Darwynn' is not widely recognized, hence classified as 'unknown'.", "The URL structure does not show typical signs of phishing, such as misspellings or unusual domain extensions.", "The presence of a generic input field like 'Full name' does not inherently indicate phishing."], "brand_matches":[false], "url_match":false, "brand_input":"Darwynn", "input_fields":"Full name"}

URL: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7 Model: jbxai	{ "phishing_score":3, "brands":"Darwynn", "legit_domain":"darwynn.com", "classification":"unknown", "reasons":["The URL 'darwynnfulfillment.freshdesk.com' is hosted on Freshdesk, a known customer support platform.", "The brand 'Darwynn' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The use of a subdomain 'darwynnfulfillment' on Freshdesk suggests it could be a legitimate support page for Darwynn, but it is not a direct match to a primary domain like 'darwynn.com'.", "Freshdesk is a legitimate service provider, which reduces the likelihood of phishing, but the specific subdomain should be verified with the brand.", "The input field 'Full name' is common for support or contact forms, which aligns with Freshdesk's purpose."], "brand_matches":[false], "url_match":false, "brand_input":"Darwynn", "input_fields":"Full name"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2609)
Category:	downloaded
Size (bytes):	2771
Entropy (8bit):	5.330972099586877
Encrypted:	false
SSDEEP:	48:NEziSHvaS18A37h+27lVWMzoCoyYkHykhpUhHSUdhKU04obSN114YLZ:ki5pMP77ukHMsMp7NzZ
MD5:	D5843DBDC71FF8014A5EAFD346A262DA
SHA1:	127E1D971EFAB9341DB8079F10663DC28E8E0A2F
SHA-256:	8E73A30D35C83EA6A597C3343324D2B7DF097AD26E67B62EFB5266EE12D317B5
SHA-512:	AC28DFA1A6FD09528E1FFC3F4FA19B0719C01F9033872E3EAB51175B95C451179F1DB22445B43EF9947E1810A5A37FDDDEAE7CDD7FE03B814A98E16E8642AB74
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js
Preview:	/!. jQuery Mousewheel 3.1.13. . Copyright 2015 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3966
Entropy (8bit):	7.8660198564613575
Encrypted:	false
SSDEEP:	96:KG1mQitM99olthv4s0hXmboroYrudoZ0UNgAtVG:KG1m1thvjAWaoUud13ArG
MD5:	24E57A81046C39DD5B37F0201D32A914
SHA1:	EE9470DB6964222EFE79CB78A44EBCBE9CAB7159
SHA-256:	92E14D7414C372CBC6175D630A47A7030F87B3C0B54D6CAB24E4795C7EB2D106
SHA-512:	4CD50AC4998D2B4BB656E71077CEA5F81E5F621823E4B8F51BF5D8EEE3AD9F43BB8E679D61A7B7B921E2C1B71AEA2A029D7F0E35C74EBA18DD2D21378B999A1C
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZVAlJh7qH3kuFxlIk0Jf-xB-Clir31is5w.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T132508Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=674e0ee39d0c749457254fc6f216460c8583d272046a8cd6eab3a0def0dd0998
Preview:	.PNG........IHDR...2...2......?......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....;.R.~w....IDATh..{p\.}...q.{W.{W..V.$YF...,!\a......l...!..a.%iKf.L.24..i..i...j.1.J[.+...!......-UZ.k.C.w........z..3.f...{....Y...<............A...@.S......6.....s...Zu.z.k.?E.{.((....oq1...Q.=..b..d.@............S~#?=..........y.f.8....;....P.P....+=...dT.d@..i=.J.a,S(i....xX..8.-....Z...m....v[C.X.#.u..B..Ey.!tp..`$SR=.5..?OT...oZ...JH..;...D..pD..#\|Z......X.r%........J.0..s.....$I..,......../...!....s.i...W.q.-...x....p......\d...............c..t......QQ.3.!?.G!.....>...L6;oxd..ql.0..8..3@..#.0:..VOO..b1.g.....D".A......\|.B.P.!.R...F.0<<\.n'.<d.f.6...z.r...f.3..\n.m;....3...>........&rV...s.....y=B....c.R......X.u]..!.N.K...D...Y..$IB.7n..x.vJ);.N?S.._..;...?xp.h....ycU...\....U..[....CE@....K.......`>... .....'''...a.......$.ccc+.B.%K.L...BGG..\.....7d2.(.....W.....O%I.X..7^..V....i..x..q..b....\|l}.{.."...PYYI...6.B.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Mar 21 14:06:13 2024, max compression, from Unix, original size modulo 2^32 1859753
Category:	downloaded
Size (bytes):	537164
Entropy (8bit):	7.999154089728815
Encrypted:	true
SSDEEP:	12288:aGPa86aMhuGFSPEfvXRN5GWlmwnlSD1MkZCsaxh1j0DCk:aGP9xMhzFSMnXRN5GWlmCaKkknxn0f
MD5:	C899E6357A193E5F5AABA4B64D1037F4
SHA1:	F073A451FDA7F0F9281E715D351BE5F8CFFA6952
SHA-256:	9F308C1002155F0D12856D9587491F95560412A46302222615C8F00B81320AB3
SHA-512:	4FAB1526677116E6B58A0A9C54A0961D01DFF267D84FC8BF3498DA14F3A270A7D092F1705A8B65B066B6CA249563989E83A4A06CE21F40244A57B9327E947B90
Malicious:	false
Reputation:	low
URL:	https://assets2.freshdesk.com/assets/cdn/frameworks-f591442b919f150f5c0b50e1012a34829e8a6ae061cdc17eb1c2cda99e8baf68.js
Preview:	.....>.e...y..F.&..~."..1.J.g......n]-...a.(2....h..T..?..O....r.....U..ygddDd...tV&Yz.(..'...k_.7.")...u$.[/.{....,...z.m.\.%JF..N.g.9....g...et...(u.\.DN.R...nrYn...`...W..#.R.7.y\J.......^.Z{{.....~4....u".e......<J.#...".^}J_..Z.._..-.Y.K!'.4...U3....nP....y\|=X.Y...k.a..$..r....fE.,..$.g...,-...v.....-m.....n.I...}...w..A.....B~v.DFr.....?...........v..,..8..7^..O..@?.Ow.NS....(...x.\|.......w..w..{.....g../..../....oF..d=I..=;.I.2~I...../,'................UgJ..\|.-i......e...EX........X... ...2.}.BJ...-6.E..Cq'..do.......}wr2.>-.Rz.n.P,...3.v6Z~mW..v..O..,wI=...b1....y..'....b.}:..O...e\,P)....h.YI.Is.)..$....o:H.Q_].....d.FX.4...R\.s.vND..r.z.qQzb...Z..2[...jA.3j.8O.l.J..Q....F....O.s.PCJ..:.O.R.x>.QW..a.~..m..)N7q~M.x"/r..".g.....%.#.O.T...o.7W.t.{KS/W.2..W.J....I\|$g.q.....w...~.4*'....,-.~0..N.q.g...'...o2..@.T....%..%.0_D..i........}......z.U......../<......j.....h1.c..+..lg.ZNN. d.....<.....{.....<^..3`..W...5N..)G.2^.KV

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975), with no line terminators
Category:	downloaded
Size (bytes):	3975
Entropy (8bit):	5.2839002301990154
Encrypted:	false
SSDEEP:	96:suFJ+ERWJIUl/LLYIPbfLptVr8un6VWsGouqJEXNXSzxsvkyAi:seJ+EE+UBLLxPbfLHVr8unj5ouqJcVSa
MD5:	DCE803E1493CE08602B1DBCB8E5527D2
SHA1:	A55BC51A631E512169A965A8BEDFFA22FD522418
SHA-256:	6811A768981410D46B9E7952A7B82577456785AC3956F82C032A1BEECE396E9B
SHA-512:	257C12D650EF0F3CC05928DF81F5D89F10B4CC8A55637D9DE9535B93A23BF7A93B39F320F92C3C39349F01F9D6864ED2F65F04A9251E7CCFF6C2F730869EF730
Malicious:	false
Reputation:	low
URL:	https://darwynnfulfillment.freshdesk.com/assets/strftime-min.js?1728540009
Preview:	Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,a){for("undefined"==typeof a&&(a=10);parseInt(e,10)<a&&a>1;a/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsByTagName("html")[0].lang&&(Date.prototype.locale=document.getElementsByTagName("html")[0].lang),Date.ext.locales={},Date.ext.locales.en={a:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],A:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],b:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],B:["January","February","March","April","May","June","July","August","September","October","November","December"],c:"%a %d %b %Y %T %Z",p:["AM","PM"],P:["am","pm"],x:"%d/%m/%y",X:"%T"},Date.ext.locales["en-US"]=Date.ext.locales.en,Date.ext.locales["en-US"].c="%a %d %b %Y %r %Z",Date.ext.locales["en-US"].x="%D",Date.ext.locales["en-US"].X="%r",Date.ext.locales["en-GB"]=Date.ext.locales.en,Date.ext.locales["en-

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Jul 12 07:42:38 2023, max compression, from Unix, original size modulo 2^32 135005
Category:	downloaded
Size (bytes):	36298
Entropy (8bit):	7.994623039256934
Encrypted:	true
SSDEEP:	768:qxcnwUXQLdSMgxcaWJ14cUdV66y9X/h8R4mJLwMkzjFd:CwnC4xc9X4DfnythA5BOjFd
MD5:	66B03BA3BB716FC88B1F55BA0E79C3B6
SHA1:	6021D77D5E008C77D6E8BF8F27164DE63046F186
SHA-256:	BAFC673436B8ED6761B9E145FC457A1CBF5B8CF5CC1221B105AA062A3E585F1A
SHA-512:	33FCCD36CB71EB007E8C5B38987F1762A5DA289C4BFEBB96E74CE79B775A4E8D68132ACACB40B6889143976B1B483083289FB8257C79DCE5B38249DE5B2CC7C9
Malicious:	false
Reputation:	low
URL:	https://assets8.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js
Preview:	....nY.d...k{.F.(..._A"^..A.......W.../k+3.R...lI.S...mkH.o....@....=..3c..F_......r...U.g..'>.6..eA..u.Mgcxd.?)..F.vT.../......f.%....0.3...+T.....A:.f1....twq[.~....y5H....T.n.iN...........,88......T......4..7..A.%<.. d...Z...t^...h:....}o....>)...!.....k.U....(....a..Y...j...W.^..Vkh..n....z..S:8.9-.9}5.d....7/..:...}.X..G..W.{..r^...l..].../[......`..{[.U^.X..++Jh5.F.?.....>-./%+.....w.@...ARU....3....\|.$......5K....I.(K>....p.m.\.......NV.%.....?.......Q..}p............^...?.K.>.H..F...:..W...ip.?...O.........Y.m~z.TW.ZF.9Y.....;.C...88..:\|.b..".7..&..t.D..[...`.........;V..q[M..k...\|?..V.(.K..yOJ..r<;<..........$xr...{..........9......_.9................G!.^U7..D....w._....l..+...e..+...QA....qw..q7<[&e.o8`...-..JK@..J.e..6H.Q..Ai.....l.\...v.R.&.M...R.*N..UzQ...E5..C.......E..pP.a..i..=~..V".....".M...Jm.J...u9..,...8.C.#.b....TR... .b......3E.....m...E.......`.KW.k.z1.....O............A...L..u..nJhal>n....;.....8.<...=$....O....2.0<...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2104
Entropy (8bit):	7.771177771948932
Encrypted:	false
SSDEEP:	48:S7LqdjwklB3628VvALqtfkWE16Fcj2Qr+NVHv3Vo7Ele:aUjwklRP8925WEMFU2Qr4Vioe
MD5:	5A3ABB67F0A2665C3126062E204524A8
SHA1:	7681600EEC1BECBA2B7389402C0F76C297642E0B
SHA-256:	7674CC373119A2D2171FEDAFBC7117A36379F732F944198CD201252FC48604A8
SHA-512:	FD43885BB75C3A23E52B6D7DE7CAEE9EE4E61B1007217F993EFB16D591DA7649A56E1DE28537F1DA4216CEA65E0E2B061F858DBF7B8ADA76905F861371F5D002
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....;.F."8...<IDATX..VMlT..=....g.3....<.P.c...V..[...B......Hm.uA.E+.Fb.t.vAXvQ!...JKQ...V...$..2.6.`cl...o.y...".4.`..nr...{..>].s..A.....I<.b.~.HH.h..#-.....>>./_....9`.5h...-.%.d.:.P..'.....J.....qD....(......::.Y.".o\.=N..Z...9.........\..@>...J..Z.gj..?..KX..n.:1...&..~.1}} !..1F._.y;...."b.1_.!.R........]....+_...~ZJY.a...^l.x......b...da..`1..g......a........V.C.-.j.3.\.Ck.a.]3.<.....9z...........v%....-......{..].v.1...7]....5...g..9.$.7.......%K.c..8N.0...q.u..N.$.-.%f..Pw....`..Y...L....nc...q\|%.C...n..3....xo...T*~.^..9.SJ..c?4F.ccc....CX.T0::....].v..Zk...Uq.......xo..hnnF.....!.a8.h4.....C.......:;;Q(.v.....9....0.'.8..../.TgSSS%..hll..\|~...".<[.V..n~...q..Y.r.M.....T=...9. .....V.yFk...J.r.V. .@k}+..y..o.}..."......jI..J.7FGG..`&M..Z..Z..R..:..W...{...........F.ce...2..`.. ..<...R.0.F...RJ.@.9..<.......<..@D_.R..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Tue Dec 19 12:49:46 2023, max compression, from Unix, original size modulo 2^32 133640
Category:	downloaded
Size (bytes):	31706
Entropy (8bit):	7.9929159076309375
Encrypted:	true
SSDEEP:	768:D32RFFgMzsAH3hpOuq1uPGPgfEIywikiTB1gdXjMMS8xd:D32RFPjhHWgfEso9KBjMMxd
MD5:	32457F43D69EC6025966CCD300A60C75
SHA1:	BB7019AE96A7115A7D09AEACCAEF1E9A6ACE1759
SHA-256:	0D218945BF9A86D3629389D8D0C81C017129AD144FA732331233C709CCDEEFE4
SHA-512:	BB48CDB7CDB774F3FC271F605A699745758D64D5CC1D6BEE16CE1ED1355C098A3C286DC79F3E7F8446AB5C24588676D6DDE62E349C2158DB8AD7B62923988CAD
Malicious:	false
Reputation:	low
URL:	https://assets1.freshdesk.com/assets/cdn/common-284ce6b5922f3ee12731a4050ae7092884cde90a2c5a11a7a52e206e8d37d41b.css
Preview:	....j..e...}.r.H....Fu5....;zb...Ym........0.{.._fj.L...V....K.......,3{a$.zH..6a..eB^...N..wM...d-/..,.....e.311.%V..a.ik..ZK..y<^'dem......k..c}.PtPF1U-.jFB.,.."./..}i%.c5....X%..l...^.s..2......U..[y..'6.=.hK[['T..N.j.4..#a......01..!.A..6.jB.W.n..6..=1M;a.4YM.k.%a..ym...c.......-..:=.T..t...~y. .......M....$..6an...N.7.C..S.kX..B^.>.`n..yB....V..x0.7...L....o.../5.mb...N.3.F_..n;.,.`h.#...d8...D^.../...`e#)..ty3.-...9.w...-.~l..........Fr.t.V1.s}36de~;....-.......6.'...fi.....k`.Z..F.....7..T...f.._n..........yBL.7[...Svv..9...2.....i.6...}Xi...,$.....uP7.x.m..b...=AO.?...F...Rg..\|.g..%8`k.....S.....I.]._9......T5.\.p...}t..$l.%.@%c.P?.I<.-.]h..........u...........i...&...T.USo......4c.9[.+\|.m.......m....4t5...(..\|g.E..s0k.......D..BWUC.v.._.0u.\b....Jz...%.......w..A.u.M.O..Y_....<...-O.pP^.E..$.....1C...K.....MD..q...`..}.......y.w.j..ua.e...eU.Xp..e........ K.D.)&...>q.(..Q...*....6..,&...-...t}:..%(..'[M:...T_.~4.Yr.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.427567157116927
Encrypted:	false
SSDEEP:	3:mSifLxCnIzbPgyYn:mSifLEnIzbPgyY
MD5:	9CCAFCD1B4D46192C6527F059634019F
SHA1:	6D781C98F159844DCCD7759A74DBA062BD6CD47B
SHA-256:	D1B6FE95FEA822A8532755436CCDA8C8107E6092805AE476D2DE91DF1DC3678D
SHA-512:	EB1B038D65F9B8330D7FF8089AD06162D4A7B2D90C79AB3990EC88F5CA9888B31A9B4E3F70BF3C67F5430B10A890ECCB50913760C4135AD9DEC73E527D985C0F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmRb-U5HFS4IBIFDRNzOdYSBQ3LAvZiEgUNos1JEQ==?alt=proto
Preview:	ChsKBw0TcznWGgAKBw3LAvZiGgAKBw2izUkRGgA=

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2104
Entropy (8bit):	7.771177771948932
Encrypted:	false
SSDEEP:	48:S7LqdjwklB3628VvALqtfkWE16Fcj2Qr+NVHv3Vo7Ele:aUjwklRP8925WEMFU2Qr4Vioe
MD5:	5A3ABB67F0A2665C3126062E204524A8
SHA1:	7681600EEC1BECBA2B7389402C0F76C297642E0B
SHA-256:	7674CC373119A2D2171FEDAFBC7117A36379F732F944198CD201252FC48604A8
SHA-512:	FD43885BB75C3A23E52B6D7DE7CAEE9EE4E61B1007217F993EFB16D591DA7649A56E1DE28537F1DA4216CEA65E0E2B061F858DBF7B8ADA76905F861371F5D002
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_icon/FySB4N0Dof4unBE7hZXBHx8yOpu64TWbMw.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....;.F."8...<IDATX..VMlT..=....g.3....<.P.c...V..[...B......Hm.uA.E+.Fb.t.vAXvQ!...JKQ...V...$..2.6.`cl...o.y...".4.`..nr...{..>].s..A.....I<.b.~.HH.h..#-.....>>./_....9`.5h...-.%.d.:.P..'.....J.....qD....(......::.Y.".o\.=N..Z...9.........\..@>...J..Z.gj..?..KX..n.:1...&..~.1}} !..1F._.y;...."b.1_.!.R........]....+_...~ZJY.a...^l.x......b...da..`1..g......a........V.C.-.j.3.\.Ck.a.]3.<.....9z...........v%....-......{..].v.1...7]....5...g..9.$.7.......%K.c..8N.0...q.u..N.$.-.%f..Pw....`..Y...L....nc...q\|%.C...n..3....xo...T*~.^..9.SJ..c?4F.ccc....CX.T0::....].v..Zk...Uq.......xo..hnnF.....!.a8.h4.....C.......:;;Q(.v.....9....0.'.8..../.TgSSS%..hll..\|~...".<[.V..n~...q..Y.r.M.....T=...9. .....V.yFk...J.r.V. .@k}+..y..o.}..."......jI..J.7FGG..`&M..Z..Z..R..:..W...{...........F.ce...2..`.. ..<...R.0.F...RJ.@.9..<.......<..@D_.R..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Mar 21 14:06:13 2024, max compression, from Unix, original size modulo 2^32 1859753
Category:	dropped
Size (bytes):	537164
Entropy (8bit):	7.999154089728815
Encrypted:	true
SSDEEP:	12288:aGPa86aMhuGFSPEfvXRN5GWlmwnlSD1MkZCsaxh1j0DCk:aGP9xMhzFSMnXRN5GWlmCaKkknxn0f
MD5:	C899E6357A193E5F5AABA4B64D1037F4
SHA1:	F073A451FDA7F0F9281E715D351BE5F8CFFA6952
SHA-256:	9F308C1002155F0D12856D9587491F95560412A46302222615C8F00B81320AB3
SHA-512:	4FAB1526677116E6B58A0A9C54A0961D01DFF267D84FC8BF3498DA14F3A270A7D092F1705A8B65B066B6CA249563989E83A4A06CE21F40244A57B9327E947B90
Malicious:	false
Reputation:	low
Preview:	.....>.e...y..F.&..~."..1.J.g......n]-...a.(2....h..T..?..O....r.....U..ygddDd...tV&Yz.(..'...k_.7.")...u$.[/.{....,...z.m.\.%JF..N.g.9....g...et...(u.\.DN.R...nrYn...`...W..#.R.7.y\J.......^.Z{{.....~4....u".e......<J.#...".^}J_..Z.._..-.Y.K!'.4...U3....nP....y\|=X.Y...k.a..$..r....fE.,..$.g...,-...v.....-m.....n.I...}...w..A.....B~v.DFr.....?...........v..,..8..7^..O..@?.Ow.NS....(...x.\|.......w..w..{.....g../..../....oF..d=I..=;.I.2~I...../,'................UgJ..\|.-i......e...EX........X... ...2.}.BJ...-6.E..Cq'..do.......}wr2.>-.Rz.n.P,...3.v6Z~mW..v..O..,wI=...b1....y..'....b.}:..O...e\,P)....h.YI.Is.)..$....o:H.Q_].....d.FX.4...R\.s.vND..r.z.qQzb...Z..2[...jA.3j.8O.l.J..Q....F....O.s.PCJ..:.O.R.x>.QW..a.~..m..)N7q~M.x"/r..".g.....%.#.O.T...o.7W.t.{KS/W.2..W.J....I\|$g.q.....w...~.4*'....,-.~0..N.q.g...'...o2..@.T....%..%.0_D..i........}......z.U......../<......j.....h1.c..+..lg.ZNN. d.....<.....{.....<^..3`..W...5N..)G.2^.KV

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2609)
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	5.330972099586877
Encrypted:	false
SSDEEP:	48:NEziSHvaS18A37h+27lVWMzoCoyYkHykhpUhHSUdhKU04obSN114YLZ:ki5pMP77ukHMsMp7NzZ
MD5:	D5843DBDC71FF8014A5EAFD346A262DA
SHA1:	127E1D971EFAB9341DB8079F10663DC28E8E0A2F
SHA-256:	8E73A30D35C83EA6A597C3343324D2B7DF097AD26E67B62EFB5266EE12D317B5
SHA-512:	AC28DFA1A6FD09528E1FFC3F4FA19B0719C01F9033872E3EAB51175B95C451179F1DB22445B43EF9947E1810A5A37FDDDEAE7CDD7FE03B814A98E16E8642AB74
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Mousewheel 3.1.13. . Copyright 2015 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Jul 12 07:42:38 2023, max compression, from Unix, original size modulo 2^32 135005
Category:	dropped
Size (bytes):	36298
Entropy (8bit):	7.994623039256934
Encrypted:	true
SSDEEP:	768:qxcnwUXQLdSMgxcaWJ14cUdV66y9X/h8R4mJLwMkzjFd:CwnC4xc9X4DfnythA5BOjFd
MD5:	66B03BA3BB716FC88B1F55BA0E79C3B6
SHA1:	6021D77D5E008C77D6E8BF8F27164DE63046F186
SHA-256:	BAFC673436B8ED6761B9E145FC457A1CBF5B8CF5CC1221B105AA062A3E585F1A
SHA-512:	33FCCD36CB71EB007E8C5B38987F1762A5DA289C4BFEBB96E74CE79B775A4E8D68132ACACB40B6889143976B1B483083289FB8257C79DCE5B38249DE5B2CC7C9
Malicious:	false
Reputation:	low
Preview:	....nY.d...k{.F.(..._A"^..A.......W.../k+3.R...lI.S...mkH.o....@....=..3c..F_......r...U.g..'>.6..eA..u.Mgcxd.?)..F.vT.../......f.%....0.3...+T.....A:.f1....twq[.~....y5H....T.n.iN...........,88......T......4..7..A.%<.. d...Z...t^...h:....}o....>)...!.....k.U....(....a..Y...j...W.^..Vkh..n....z..S:8.9-.9}5.d....7/..:...}.X..G..W.{..r^...l..].../[......`..{[.U^.X..++Jh5.F.?.....>-./%+.....w.@...ARU....3....\|.$......5K....I.(K>....p.m.\.......NV.%.....?.......Q..}p............^...?.K.>.H..F...:..W...ip.?...O.........Y.m~z.TW.ZF.9Y.....;.C...88..:\|.b..".7..&..t.D..[...`.........;V..q[M..k...\|?..V.(.K..yOJ..r<;<..........$xr...{..........9......_.9................G!.^U7..D....w._....l..+...e..+...QA....qw..q7<[&e.o8`...-..JK@..J.e..6H.Q..Ai.....l.\...v.R.&.M...R.*N..UzQ...E5..C.......E..pP.a..i..=~..V".....".M...Jm.J...u9..,...8.C.#.b....TR... .b......3E.....m...E.......`.KW.k.z1.....O............A...L..u..nJhal>n....;.....8.<...=$....O....2.0<...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Mon Dec 12 03:50:12 2022, max compression, from Unix, original size modulo 2^32 53127
Category:	downloaded
Size (bytes):	8638
Entropy (8bit):	7.976387138560033
Encrypted:	false
SSDEEP:	192:W5ms/gBUi9JhLHwHA2nVyzkx3l/33T1PPs6Xt1kjYpdmMeDLuYIqa1oomiVe7g:taoU+hQnVwq/HTJHtakpdmMNYpa87g
MD5:	50A2541263ABB3B92AC0CE82C386E6F7
SHA1:	695C81E2DE28255C61FED5C0C4EED55B4105EC14
SHA-256:	30BFB38923B300DECA1B9C25AF984EDF0D804A68F13213357376DCA63FEF731A
SHA-512:	8E55F12C80DD80F1F8C780DCCDB04F3D7F09E89F2A106BAE87818B68B4928F77A3478AD23EC537C2729B53AF7E2351658F11AA9BFBD11AFB2804A63A9DCA6879
Malicious:	false
Reputation:	low
URL:	https://assets10.freshdesk.com/assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css
Preview:	.......c...=i..Fr..+.7...Q.C...=.d.$. ...lgA.....D-Iyf,.O..j.:.. ..?....bUuuuuq..".Qs:$Y..V.z.TO....U...w....g.,..E.e.)....S.5.+..^....l.r....b..>...q.......".#...O..j.Ni..,.j.j.$~..C./. ...e.g.+...G.wIQ..a.x:..@..o..b~...&..pl&.#....@i3i..&.P"C...?1d.e..R..s<...&....z..~FM.&._..=L..`.\|S.I1q.d_.5..-.X..Y....C..z ..?)E...?aBj.Y..Qw.R.....vxn.Z....B....q.A.V.vI..z....%Uj...f....q...I6.ri}K.\|O.&.i.......o....gSf.8Cp.v.]n...U...z.b.i..wL.My..g{...$...<.3W.~..:E.!i...]..~....9..O+.!..?6.%_^......XC....\|.q..A$c7........a..&J........k...#..u......j[....h...k....J..&`..w.Q.p....!.@.....J.P.d.$!....1.....:brR=m.7.`..I...o.x\..<L...o.s.w2..Q...4D.2..9D..?.....G.....F./\|...F.w.t..K4x..g.~..=.t.f..y.r....My..$.C7.......?.C...T).o.BW...y....f...E....2f....g.?.Rqc..P.g...(.__)I....kiP...?.E.....7.~ ..O.j..!a...\|..\.T."...0.[y!...........l:..[n........XE.[.A.o!B..V..\.d......A.;].s..l\l..Pf..T...-.\=.Y...O.y........T%.3H..g.2o0mH..-..=...Tk\.5..\|..5.......

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Apr 17 09:51:07 2024, max compression, from Unix, original size modulo 2^32 176393
Category:	dropped
Size (bytes):	48235
Entropy (8bit):	7.995787083206442
Encrypted:	true
SSDEEP:	768:sK7J08+ImMZWa+8U2leuNwKcJOh3dWZy4sfXRCNiiqPKJhjAK6y5p6r212rBvy0:Pd+ImMZr+rluNlNWQ4WXRCQxuhASb6r5
MD5:	D46F9FAFE9C1F9B32E2451806D677D40
SHA1:	C0EA4738BE711D65600CC4A9337931A1AD370D61
SHA-256:	24E7DE42995C273A05EC937A902C3426276D6C2FC1E124E3C709448ADCCB6EDA
SHA-512:	398CF72DA6F0DF394BEB96E18AFC66E2A2E111C34C0543294C82E380D3E2F8EAA03BFC73806155CD63C9960B294292EFB5E0F1FB922DEF72BB380ED86A131EFE
Malicious:	false
Reputation:	low
Preview:	.......f...}kc.F..._A.....K.3....q.g.8.;;...^.lJ.A...................F..........:.eA...x.....8Y......KZ....^.....eh9.9.m.uA..&<['Q.g.^L_.....wo..d.'..j{..)g.!........,..+.......-~\|...'Y7..`.=...m9.3.OF.Ku.r...N.:.s..T_GF_.;...y.#(....>.....h..,..`n9u..\A.;.j.)k..(....S."``.5v....Z.0a....]...0........H0.....uf...;..`..v3~..&b..z.`A.....{....tp\|l.<{.,y....`y.8..0h..<..U.n-....Z.a..-w.s..8v..........m1.9.....j.C...'.......\|.A..?A...H7.]...~..4...,.........\|.Y.1$.L... HL..M-..:...]~...,....X...W.8}...:H.n...)o!.A.C......v....gI.na.q.c...V...7....>"a..%\|...../.u.s.+..E..9^.V..q.......2..s@....z..S{D.k..~....au..6.s.Y0>Z.ya.F.0<.}.s.J-.. ..G._.2.X.U..`....`+Xvg,.q..Y..*...Z....y]..zy.....6......G......U]!..O.......,..i....V;..f.5.\|@+...6.T7H.e.B.LHN...\|6....V...........t3_5.38..._....;......65Q_..xX...;..h.qN..i..b{.."N...5q..5K.\|..K.....v...f~6.&..f..9.]......C..y.X....)q..~J..........7sv;.....z...4.^.......o\|...w..D~.L...A....\^&.R..Q.hM

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Apr 17 09:51:07 2024, max compression, from Unix, original size modulo 2^32 176393
Category:	downloaded
Size (bytes):	48235
Entropy (8bit):	7.995787083206442
Encrypted:	true
SSDEEP:	768:sK7J08+ImMZWa+8U2leuNwKcJOh3dWZy4sfXRCNiiqPKJhjAK6y5p6r212rBvy0:Pd+ImMZr+rluNlNWQ4WXRCQxuhASb6r5
MD5:	D46F9FAFE9C1F9B32E2451806D677D40
SHA1:	C0EA4738BE711D65600CC4A9337931A1AD370D61
SHA-256:	24E7DE42995C273A05EC937A902C3426276D6C2FC1E124E3C709448ADCCB6EDA
SHA-512:	398CF72DA6F0DF394BEB96E18AFC66E2A2E111C34C0543294C82E380D3E2F8EAA03BFC73806155CD63C9960B294292EFB5E0F1FB922DEF72BB380ED86A131EFE
Malicious:	false
Reputation:	low
URL:	https://assets7.freshdesk.com/assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b1f64384ab5de640.js
Preview:	.......f...}kc.F..._A.....K.3....q.g.8.;;...^.lJ.A...................F..........:.eA...x.....8Y......KZ....^.....eh9.9.m.uA..&<['Q.g.^L_.....wo..d.'..j{..)g.!........,..+.......-~\|...'Y7..`.=...m9.3.OF.Ku.r...N.:.s..T_GF_.;...y.#(....>.....h..,..`n9u..\A.;.j.)k..(....S."``.5v....Z.0a....]...0........H0.....uf...;..`..v3~..&b..z.`A.....{....tp\|l.<{.,y....`y.8..0h..<..U.n-....Z.a..-w.s..8v..........m1.9.....j.C...'.......\|.A..?A...H7.]...~..4...,.........\|.Y.1$.L... HL..M-..:...]~...,....X...W.8}...:H.n...)o!.A.C......v....gI.na.q.c...V...7....>"a..%\|...../.u.s.+..E..9^.V..q.......2..s@....z..S{D.k..~....au..6.s.Y0>Z.ya.F.0<.}.s.J-.. ..G._.2.X.U..`....`+Xvg,.q..Y..*...Z....y]..zy.....6......G......U]!..O.......,..i....V;..f.5.\|@+...6.T7H.e.B.LHN...\|6....V...........t3_5.38..._....;......65Q_..xX...;..h.qN..i..b{.."N...5q..5K.\|..K.....v...f~6.&..f..9.]......C..y.X....)q..~J..........7sv;.....z...4.^.......o\|...w..D~.L...A....\^&.R..Q.hM

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3966
Entropy (8bit):	7.8660198564613575
Encrypted:	false
SSDEEP:	96:KG1mQitM99olthv4s0hXmboroYrudoZ0UNgAtVG:KG1m1thvjAWaoUud13ArG
MD5:	24E57A81046C39DD5B37F0201D32A914
SHA1:	EE9470DB6964222EFE79CB78A44EBCBE9CAB7159
SHA-256:	92E14D7414C372CBC6175D630A47A7030F87B3C0B54D6CAB24E4795C7EB2D106
SHA-512:	4CD50AC4998D2B4BB656E71077CEA5F81E5F621823E4B8F51BF5D8EEE3AD9F43BB8E679D61A7B7B921E2C1B71AEA2A029D7F0E35C74EBA18DD2D21378B999A1C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....;.R.~w....IDATh..{p\.}...q.{W.{W..V.$YF...,!\a......l...!..a.%iKf.L.24..i..i...j.1.J[.+...!......-UZ.k.C.w........z..3.f...{....Y...<............A...@.S......6.....s...Zu.z.k.?E.{.((....oq1...Q.=..b..d.@............S~#?=..........y.f.8....;....P.P....+=...dT.d@..i=.J.a,S(i....xX..8.-....Z...m....v[C.X.#.u..B..Ey.!tp..`$SR=.5..?OT...oZ...JH..;...D..pD..#\|Z......X.r%........J.0..s.....$I..,......../...!....s.i...W.q.-...x....p......\d...............c..t......QQ.3.!?.G!.....>...L6;oxd..ql.0..8..3@..#.0:..VOO..b1.g.....D".A......\|.B.P.!.R...F.0<<\.n'.<d.f.6...z.r...f.3..\n.m;....3...>........&rV...s.....y=B....c.R......X.u]..!.N.K...D...Y..$IB.7n..x.vJ);.N?S.._..;...?xp.h....ycU...\....U..[....CE@....K.......`>... .....'''...a.......$.ccc+.B.%K.L...BGG..\.....7d2.(.....W.....O%I.X..7^..V....i..x..q..b....\|l}.{.."...PYYI...6.B.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	7015
Entropy (8bit):	5.272941310727604
Encrypted:	false
SSDEEP:	96:m9WeN3lbZTA4Cnih/Y9gxnrcXKCvl8StyxvEOyj06zlxEPFBtAaS:yrYih/YiNcXpvlI8Oi06zPEPFDAaS
MD5:	108C4DEE7BDEC167032FC1AAFE87046C
SHA1:	2694E28BA820E3FF454C919ADB73B2E159F2F96E
SHA-256:	F7E9BA9D9D499DB2045E5BBD3DFCDACC90921D4807976D33C158DECB332D2207
SHA-512:	8C229FCC605DE816C0C4D48D65E040560D630644C5C0CB5DB4BEAFFACD2C76E2E26BA031FCCBAC57D510C447EF152C2B85516A8F52FC940C8492FF28AD7DAC48
Malicious:	false
Reputation:	low
URL:	https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7
Preview:	<!DOCTYPE html>.. [if lt IE 7]><html class="no-js ie6" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 7]><html class="no-js ie7" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 8]><html class="no-js ie8" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 9]><html class="no-js ie9" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 10]><html class="no-js ie10" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if (gt IE 10)\|!(IE)]> ><html class="no-js " lang="en" dir="ltr" data-date-format="non_us"> <![endif]-->.<head>. <title>Helpdesk : Darwynn Fulfillment</title>. <meta name="csrf-param" content="authenticity_token" />.<meta name="csrf-token" content="WOtvmmeb/lMlPvwjg0Xdw4wzRzOcuJj3MGKALRPCotsQx4b0LNQW/TY2iZu5tVFch3GAOXwywgXDTa0jiaBCiQ==" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="cano

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975), with no line terminators
Category:	dropped
Size (bytes):	3975
Entropy (8bit):	5.2839002301990154
Encrypted:	false
SSDEEP:	96:suFJ+ERWJIUl/LLYIPbfLptVr8un6VWsGouqJEXNXSzxsvkyAi:seJ+EE+UBLLxPbfLHVr8unj5ouqJcVSa
MD5:	DCE803E1493CE08602B1DBCB8E5527D2
SHA1:	A55BC51A631E512169A965A8BEDFFA22FD522418
SHA-256:	6811A768981410D46B9E7952A7B82577456785AC3956F82C032A1BEECE396E9B
SHA-512:	257C12D650EF0F3CC05928DF81F5D89F10B4CC8A55637D9DE9535B93A23BF7A93B39F320F92C3C39349F01F9D6864ED2F65F04A9251E7CCFF6C2F730869EF730
Malicious:	false
Reputation:	low
Preview:	Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,a){for("undefined"==typeof a&&(a=10);parseInt(e,10)<a&&a>1;a/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsByTagName("html")[0].lang&&(Date.prototype.locale=document.getElementsByTagName("html")[0].lang),Date.ext.locales={},Date.ext.locales.en={a:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],A:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],b:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],B:["January","February","March","April","May","June","July","August","September","October","November","December"],c:"%a %d %b %Y %T %Z",p:["AM","PM"],P:["am","pm"],x:"%d/%m/%y",X:"%T"},Date.ext.locales["en-US"]=Date.ext.locales.en,Date.ext.locales["en-US"].c="%a %d %b %Y %r %Z",Date.ext.locales["en-US"].x="%D",Date.ext.locales["en-US"].X="%r",Date.ext.locales["en-GB"]=Date.ext.locales.en,Date.ext.locales["en-

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 20:28:28.579829931 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 10, 2024 20:28:28.992831945 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:28.992917061 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:28.993041039 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:28.993225098 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:28.993288040 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:28.993455887 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:28.993475914 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:28.993498087 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:28.993608952 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:28.993628979 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.549716949 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.553421021 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.553489923 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.554497957 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.554579020 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.555610895 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.555689096 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.555847883 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.555866957 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.573920012 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.574174881 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.574206114 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.575089931 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.575248003 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.575457096 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.575515985 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.595858097 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.771581888 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.771615028 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.800026894 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.800056934 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.800095081 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.800115108 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.800194979 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.800314903 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.800314903 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.800316095 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.813247919 CEST	49736	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:29.813297033 CEST	443	49736	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:29.839154005 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.839216948 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.839302063 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.839497089 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.839529037 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.840747118 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.840768099 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.840828896 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.841018915 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.841044903 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.841815948 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:29.841887951 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:29.841953039 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:29.842107058 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:29.842129946 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:29.844202995 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.844234943 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.844285011 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.844433069 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.844455957 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.844512939 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.844633102 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.844644070 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.846287012 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:29.846302032 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:29.971960068 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:30.571221113 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.571316004 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.571500063 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.571536064 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.571662903 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.571722984 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.572397947 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.572496891 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.573343039 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.573395014 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.573441982 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.573443890 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.573848009 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.573854923 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.574400902 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.574495077 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.574532032 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.581742048 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:30.582231998 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:30.582252979 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:30.583698034 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:30.583776951 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:30.584430933 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.584539890 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:30.584681988 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:30.584686041 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:30.584779024 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:30.584819078 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.584825039 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.586561918 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.586648941 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.587464094 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.587541103 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.587568998 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.615400076 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.628355026 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:30.628355980 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.628356934 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.628362894 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.628376961 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:30.628381968 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.628405094 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.651216030 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.651546001 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.651587963 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.652638912 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.652731895 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.653491974 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.653563023 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.653593063 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.675061941 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:30.675061941 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.675076962 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.699398041 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.705648899 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:30.705679893 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:30.754678011 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.255121946 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.255166054 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.255178928 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.255214930 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.255234957 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.255259991 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.255290031 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.255302906 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.255345106 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.263362885 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.267517090 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.267527103 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.267560959 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.267575026 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.267600060 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.267630100 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.267656088 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.267680883 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.271976948 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.271985054 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.272067070 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.276662111 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285779953 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285808086 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285828114 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285845041 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.285873890 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285902977 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.285909891 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285933971 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285953999 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.285964966 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.285983086 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.286005020 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.325390100 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.334956884 CEST	49737	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.334994078 CEST	443	49737	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348177910 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348213911 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348226070 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348242998 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348252058 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348258972 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348299026 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.348370075 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.348403931 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.348426104 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.361339092 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.361411095 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.361439943 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.364937067 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.372257948 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.372272968 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.372560024 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.372586012 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.376353025 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.376373053 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.376410961 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.376413107 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.376441002 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.376456976 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.376487970 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.376626015 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.376676083 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.377062082 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.377116919 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.377144098 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.377161026 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.377187014 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.377259970 CEST	49739	443	192.168.2.4	18.239.81.5
Oct 10, 2024 20:28:31.377260923 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.377279997 CEST	443	49739	18.239.81.5	192.168.2.4
Oct 10, 2024 20:28:31.378753901 CEST	49740	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.378773928 CEST	443	49740	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.394593954 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.394634008 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.394695997 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.395092010 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.395106077 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.412458897 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.412559986 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.412650108 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.413463116 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.413486004 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.431654930 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.441142082 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.441159964 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.441237926 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.441262960 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.453409910 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.453433037 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.453486919 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.453505039 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.453535080 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.507612944 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.507639885 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.530973911 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.530997038 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.531027079 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.531074047 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.531095028 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.531126976 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.543239117 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.543260098 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.543292046 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.543312073 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.543325901 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.543369055 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.553755045 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.553787947 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.553826094 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.553841114 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.553877115 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.567296982 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.567346096 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.567378998 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.567411900 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.567446947 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.603450060 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603506088 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603527069 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603544950 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603584051 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603598118 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.603605032 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603672981 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.603713989 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.603713989 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.603746891 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.611535072 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.625713110 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.625725031 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.625756025 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.625792980 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.625814915 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.625842094 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.625865936 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.625927925 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.625981092 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.625986099 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.628912926 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.628932953 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.628982067 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.628995895 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.629030943 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.646681070 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.646708012 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.646785021 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.646828890 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.646886110 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.660773039 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.660830975 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.660854101 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.660862923 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.660908937 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.665451050 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.665483952 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.665553093 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.665559053 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.665602922 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.670027018 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.670069933 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.670109987 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.670115948 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.670180082 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.670186043 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.670245886 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.676484108 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.676553965 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.678026915 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.678049088 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.678103924 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.678111076 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.683728933 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.683803082 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.683825016 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.688937902 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.688997030 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.689001083 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.689028978 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.689040899 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.689070940 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.689104080 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.689933062 CEST	49738	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.689950943 CEST	443	49738	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.715481043 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.715529919 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.715579033 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.715604067 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.715630054 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.717430115 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.717446089 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.717489004 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.717504025 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.717545033 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.718431950 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.718471050 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.718487978 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.718498945 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.718547106 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.719939947 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:31.719971895 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:31.720032930 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:31.720346928 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:31.720357895 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:31.721345901 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.721364975 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.721411943 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.721422911 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.721477032 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.726274014 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.726315975 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.726347923 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.726362944 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.726393938 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.753194094 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.753271103 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.753297091 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.753890038 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.753951073 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.753961086 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.757477999 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.757498980 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.757541895 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.757563114 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.757599115 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.761034966 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.761051893 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.761132002 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.761152029 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.769789934 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.769813061 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.769836903 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.769872904 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.769898891 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.769929886 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.806035995 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.806056023 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.806140900 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.806169033 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.807699919 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.807713032 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.807777882 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.807790995 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.811279058 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.811290026 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.811378002 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.811408997 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.817616940 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.817696095 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.817713022 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.817780972 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.817857981 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.817866087 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.844811916 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.844863892 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.844966888 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.844986916 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.845052958 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.848162889 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.848208904 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.848242044 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.848249912 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.848278999 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.851836920 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.851887941 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.851950884 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.851959944 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.852018118 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.860188007 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.860227108 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.860260963 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.860269070 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.860289097 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.896393061 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.896409988 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.896502018 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.896516085 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.898013115 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.898049116 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.898133993 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.898144007 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.899507046 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.899554014 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.899586916 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.899593115 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.899646997 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.899940968 CEST	49741	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:31.899955034 CEST	443	49741	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:31.926211119 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:31.926250935 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:31.926333904 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:31.926577091 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:31.926593065 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:31.962234974 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.962580919 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.962596893 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.964128017 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.964231968 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.964237928 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.964297056 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.965940952 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.966094017 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:31.966098070 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.966172934 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:31.973694086 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:31.973731995 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:31.973819017 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:31.973958015 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:31.973967075 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.010083914 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.018300056 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.018321037 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.051441908 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.060317039 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.060420990 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.060525894 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.061227083 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.061264992 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.065938950 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.141859055 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.142067909 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.142158031 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.142163992 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.142231941 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.169631958 CEST	49744	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.169660091 CEST	443	49744	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.188064098 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.188106060 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.188182116 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.188467979 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.188478947 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.191443920 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.192289114 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.192322016 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.193784952 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.193882942 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.194185972 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.194277048 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.194299936 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.195190907 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195235968 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195270061 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195281029 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.195290089 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195327044 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.195341110 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195353985 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.195359945 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195401907 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.195409060 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.195554018 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.198031902 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.198049068 CEST	443	49735	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.198074102 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.198112011 CEST	49735	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.215261936 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.215336084 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:32.215502024 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.218111992 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.218142986 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:32.223045111 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.223067045 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.223157883 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.223351002 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.223373890 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.235450029 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.247361898 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.247402906 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.302452087 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.442003012 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.442394018 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.442457914 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.444263935 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.444372892 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.444689035 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.444761992 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.444838047 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.447504044 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.447678089 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.447710991 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.448740959 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.448810101 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.449803114 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.449860096 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.449908018 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.491416931 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.493437052 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.493444920 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.493478060 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.493494034 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.541584969 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.541590929 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.590358019 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.590405941 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.590496063 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.590503931 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.591037035 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.591654062 CEST	49748	443	192.168.2.4	104.17.25.14
Oct 10, 2024 20:28:32.591674089 CEST	443	49748	104.17.25.14	192.168.2.4
Oct 10, 2024 20:28:32.598731995 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.598778963 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.598859072 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.599035025 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:32.599049091 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:32.608679056 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:32.608724117 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:32.608800888 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:32.608972073 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:32.608988047 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:32.700001001 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.700433969 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.700460911 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.703752995 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.703826904 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.704303026 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.704360962 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.704940081 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.704946995 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:32.706728935 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.707350969 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.707376003 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.708949089 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.709029913 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.709038973 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.709075928 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.709352970 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.709466934 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.709517002 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.716927052 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.717236996 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.717298985 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.718372107 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.718451023 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.719330072 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.719418049 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.752243996 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.752268076 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.752315044 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:32.767743111 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.767800093 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:32.800559998 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.816245079 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:32.825089931 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.825500965 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.825531960 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.829612017 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.829679012 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.830338955 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.830518961 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.830775976 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.830841064 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.830845118 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.830854893 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.830872059 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.830884933 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.830923080 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.830951929 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.831165075 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.832892895 CEST	49751	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:32.832923889 CEST	443	49751	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:32.876502991 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.876563072 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.896545887 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:32.896636009 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.903919935 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.903969049 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:32.904213905 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:32.924696922 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.932054043 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.932116032 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.932138920 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.932188988 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.932233095 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.932251930 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.932274103 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.940156937 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.940179110 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.940217972 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.940222979 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.940256119 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.940274000 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.940274000 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.940279961 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:32.940351009 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:32.954427958 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.964695930 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.964704990 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.964735031 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.964747906 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.964767933 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:32.964775085 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.964843988 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.964843988 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.976484060 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:32.980763912 CEST	49753	443	192.168.2.4	54.85.43.134
Oct 10, 2024 20:28:32.980806112 CEST	443	49753	54.85.43.134	192.168.2.4
Oct 10, 2024 20:28:33.019401073 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.043890953 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.043919086 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.043957949 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.043970108 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.043994904 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.044006109 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.044028997 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.044032097 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.044071913 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.046246052 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.046307087 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.083086967 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.083151102 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.083177090 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.083185911 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.083218098 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.083230972 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.083235025 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.083323002 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.083374023 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.083859921 CEST	49745	443	192.168.2.4	52.222.225.5
Oct 10, 2024 20:28:33.083873034 CEST	443	49745	52.222.225.5	192.168.2.4
Oct 10, 2024 20:28:33.092144012 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.092421055 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.092458010 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.093501091 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.093569994 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.093957901 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.094026089 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.094113111 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.094125986 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.138871908 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.150141001 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150199890 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150218964 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150235891 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150243998 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.150258064 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150275946 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150285959 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.150293112 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150309086 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150320053 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.150333881 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.150352001 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.170882940 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.171660900 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:33.171683073 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.171978951 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.172290087 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:33.172354937 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.172429085 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:33.177246094 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.177381992 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.177457094 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.177648067 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.177649021 CEST	49752	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.177695990 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.177725077 CEST	443	49752	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.204999924 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.214376926 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.214509964 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.214564085 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.214624882 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.214745998 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.214813948 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.215425968 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.215967894 CEST	49755	443	192.168.2.4	104.17.24.14
Oct 10, 2024 20:28:33.216000080 CEST	443	49755	104.17.24.14	192.168.2.4
Oct 10, 2024 20:28:33.217194080 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.217236996 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.223433018 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.223443031 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.223500013 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.223505974 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.229429960 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.229438066 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.229456902 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.229484081 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.229489088 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.229509115 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.229521036 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.229541063 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.229809999 CEST	49746	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.229819059 CEST	443	49746	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.237165928 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.237250090 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.237320900 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.237670898 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.237694025 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.324641943 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.324678898 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.324733973 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.324738979 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:33.324803114 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:33.325727940 CEST	49754	443	192.168.2.4	3.5.21.134
Oct 10, 2024 20:28:33.325748920 CEST	443	49754	3.5.21.134	192.168.2.4
Oct 10, 2024 20:28:33.331634998 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:33.331676960 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.331773996 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:33.331970930 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:33.331979990 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.421720982 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.421782017 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.421802044 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.421842098 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.421842098 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.421874046 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.421879053 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.421890974 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.421900034 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.421907902 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.421930075 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.502278090 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.502342939 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.504658937 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.517260075 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.517302036 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.517324924 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.517338037 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.517369032 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.532620907 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.532674074 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.532687902 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.532706976 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.532731056 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.584681988 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.595918894 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.596056938 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.606074095 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.606092930 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.606129885 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.606156111 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.606165886 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.606185913 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.606200933 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.621613979 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.621658087 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.621701956 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.621709108 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.621740103 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.621753931 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.649656057 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.649694920 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.649785995 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.649791956 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.649801970 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.649828911 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.693586111 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.693674088 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.693721056 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.693727970 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.693764925 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.693772078 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.693782091 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.693798065 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.693819046 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.697700024 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.697746992 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.697767973 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.697777033 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.697840929 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.711487055 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.711527109 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.711555958 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.711564064 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.711595058 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.723613024 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.723659992 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.723676920 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.723685026 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.723720074 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.725486040 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.725528002 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.725534916 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.735882044 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.735920906 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.735953093 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.735960007 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.735991001 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.748961926 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.749010086 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.749042034 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.749048948 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.749078989 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.754682064 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.759351015 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.759413004 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.759433031 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.759495020 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.771234035 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.771274090 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.771311998 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.771318913 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.771348000 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.783628941 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.783675909 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.783716917 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.783725023 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.783745050 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.794229031 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.794267893 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.794361115 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.794361115 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.794370890 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.803138971 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.803190947 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.803409100 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.803426981 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.806062937 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.806255102 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.806272984 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.809247971 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.818062067 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.818080902 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.818160057 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.818171978 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.821038961 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.826478958 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.826497078 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.826759100 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.826769114 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.826879978 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.839787006 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.839812040 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.840029001 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.840040922 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.841279030 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.846060038 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.846113920 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.846147060 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.846174955 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.846191883 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.856292963 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.856349945 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.856395960 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.856405020 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.856415033 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.871907949 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.871949911 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.872023106 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.872031927 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.872078896 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.879096031 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.879137039 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.879168034 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.879177094 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.879291058 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.889904976 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.889946938 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.889983892 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.889991999 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.890055895 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.896929026 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.896966934 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.897003889 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.897010088 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.897036076 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.899255037 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.903608084 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.903734922 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.904845953 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.904864073 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.905070066 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.906171083 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.906225920 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:33.906455040 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:33.906487942 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.906970978 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.907267094 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.907301903 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:33.907308102 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.907340050 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.907346010 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.907356977 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.907377958 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.907398939 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.907624960 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:33.922554970 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.922595024 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.922626972 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.922632933 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.922655106 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.923039913 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.934334040 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.934372902 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.934406042 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.934412003 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.934432983 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.934861898 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.944545031 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.944593906 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.944691896 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.944691896 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.944701910 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.944866896 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.951406956 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:33.955404997 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:33.960400105 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.960441113 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.960474968 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.960481882 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.960505962 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.960644960 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.967921972 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.967961073 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.967993975 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.968005896 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.968029976 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.968050957 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.968136072 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.968142986 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.968214035 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:33.968240976 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.968446016 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.968626022 CEST	49747	443	192.168.2.4	18.245.195.5
Oct 10, 2024 20:28:33.968638897 CEST	443	49747	18.245.195.5	192.168.2.4
Oct 10, 2024 20:28:34.072397947 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:34.072468042 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:34.072559118 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:34.072685003 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:34.075957060 CEST	49757	443	192.168.2.4	52.217.140.136
Oct 10, 2024 20:28:34.075982094 CEST	443	49757	52.217.140.136	192.168.2.4
Oct 10, 2024 20:28:34.191665888 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:34.191808939 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:34.192378044 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:34.192899942 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:34.192923069 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:34.192946911 CEST	49756	443	192.168.2.4	95.100.63.156
Oct 10, 2024 20:28:34.192951918 CEST	443	49756	95.100.63.156	192.168.2.4
Oct 10, 2024 20:28:42.604331970 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:42.604384899 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:42.604681015 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:43.863094091 CEST	49749	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:28:43.863147020 CEST	443	49749	142.250.185.132	192.168.2.4
Oct 10, 2024 20:28:44.650510073 CEST	52511	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:44.655457973 CEST	53	52511	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:44.655571938 CEST	52511	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:44.655572891 CEST	52511	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:44.661068916 CEST	53	52511	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:45.101262093 CEST	53	52511	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:45.102055073 CEST	52511	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:45.107500076 CEST	53	52511	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:45.107551098 CEST	52511	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:49.966105938 CEST	60205	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:49.971102953 CEST	53	60205	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:49.971178055 CEST	60205	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:49.971211910 CEST	60205	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:49.976145983 CEST	53	60205	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:50.425271988 CEST	53	60205	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:50.425544024 CEST	60205	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:50.430826902 CEST	53	60205	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:50.430877924 CEST	60205	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:29:23.338435888 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:23.338489056 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:23.338562012 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:23.338833094 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:23.338844061 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.013962030 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.014028072 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.018574953 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.018585920 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.018816948 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.041070938 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.087395906 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.138488054 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.138511896 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.138526917 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.138581991 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.138595104 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.138637066 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.224216938 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.224247932 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.224297047 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.224302053 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.224358082 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.227232933 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.227253914 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.227300882 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.227304935 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.227319956 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.227427959 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.310817003 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.310839891 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.310905933 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.310910940 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.310962915 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.311806917 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.311820984 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.311889887 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.311893940 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.311994076 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.313623905 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.313637972 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.313676119 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.313678980 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.313714027 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.315504074 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.315520048 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.315577984 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.315582037 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.316086054 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.397892952 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.397917986 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.397959948 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.397963047 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.398015976 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.399154902 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.399169922 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.399209023 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.399213076 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.399235010 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.399250031 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.400909901 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.400927067 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.400959015 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.400962114 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.401005030 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.402743101 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.402756929 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.402836084 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.402839899 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.402909994 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.403793097 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.403810024 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.403871059 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.403875113 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.403922081 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.405422926 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.405438900 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.405472040 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.405477047 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.405483961 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.405538082 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.405546904 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.405605078 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.405667067 CEST	60208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.405678034 CEST	443	60208	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.485234976 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.485285044 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.486495018 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.486505032 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.486548901 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.486576080 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.487720013 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.487739086 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.488331079 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489111900 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489162922 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.489387989 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489659071 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489674091 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.489814997 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489828110 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.489885092 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489891052 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.489893913 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.489898920 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.490768909 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.490803003 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:24.490864038 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.491034985 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:24.491046906 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.410342932 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.411849976 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.417042017 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.419156075 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.430250883 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.430288076 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.431024075 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.431030989 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.431510925 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.431570053 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.432208061 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.432221889 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.432625055 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.432650089 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.433183908 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.433193922 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.434149027 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.434159040 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.434792042 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.434798002 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.457227945 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.457571030 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.457591057 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.458066940 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.458071947 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.533799887 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.533852100 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.533924103 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.533955097 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.534607887 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.534667015 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.534745932 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.534811020 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.534868002 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.535562992 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.535679102 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.535696983 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.535700083 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.535747051 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.535747051 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.535767078 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.535803080 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.535818100 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.535867929 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.535898924 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.536017895 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.536129951 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.536150932 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.536166906 CEST	60211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.536174059 CEST	443	60211	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.538009882 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.538047075 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.538074970 CEST	60210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.538089991 CEST	443	60210	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.539354086 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.539530039 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.539609909 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.540115118 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.540163040 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.540194988 CEST	60212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.540210962 CEST	443	60212	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.541424036 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.541424036 CEST	60209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.541440010 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.541461945 CEST	443	60209	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.546979904 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.547039032 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.547101021 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.548629999 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.548676968 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.548738956 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.550019979 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.550107002 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.550193071 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.550410986 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.550430059 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.550654888 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.550739050 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.550904989 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.550936937 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.551866055 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.551934958 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.552001953 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.552194118 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.552217007 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.585980892 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.586121082 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.586182117 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.586204052 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.586215973 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.586258888 CEST	60213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.586265087 CEST	443	60213	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.589801073 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.589884043 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:25.589962006 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.590259075 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:25.590291977 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.261590004 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.270138979 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.270160913 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.272449970 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.272469044 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.304827929 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.305190086 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.305274010 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.305628061 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.305643082 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.353188038 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.353547096 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.353610039 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.354041100 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.354054928 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.455533028 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.455753088 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.455816031 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.455890894 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.455910921 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.455924034 CEST	60217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.455930948 CEST	443	60217	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.458714962 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.458813906 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.458905935 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.459088087 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.459111929 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.469430923 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.469578028 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.469660044 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.469791889 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.469835043 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.469870090 CEST	60215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.469887018 CEST	443	60215	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.471581936 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.471613884 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.471688032 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.471868038 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.471880913 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.508295059 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.508490086 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.508546114 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.508622885 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.508622885 CEST	60218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.508665085 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.508692026 CEST	443	60218	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.510705948 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.510796070 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.510876894 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.511023998 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.511061907 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.832870007 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.833388090 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.833446980 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.833966017 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.833977938 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.863929987 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.864381075 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.864422083 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.864911079 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.864917994 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.975677013 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.975841045 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.975913048 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.976032972 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.976032972 CEST	60216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.976073027 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.976098061 CEST	443	60216	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.978907108 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.979010105 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:26.979103088 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.979259014 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:26.979285955 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.023113012 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.023341894 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.023431063 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.023431063 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.023471117 CEST	60214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.023485899 CEST	443	60214	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.025402069 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.025438070 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.025641918 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.025641918 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.025667906 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.204766989 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.205420971 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.205449104 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.205951929 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.205959082 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.231965065 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.232319117 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.232367039 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.232669115 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.232681990 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.242053986 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.242427111 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.242481947 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.242772102 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.242785931 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.311528921 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.311599016 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.311754942 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.311815977 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.311815977 CEST	60220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.311830997 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.311837912 CEST	443	60220	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.315119028 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.315182924 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.315263987 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.315393925 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.315412045 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.340075016 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.340229034 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.340296030 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.340353966 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.340353966 CEST	60219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.340383053 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.340413094 CEST	443	60219	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.342107058 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.342171907 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.342242002 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.342360020 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.342379093 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.356714010 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.356857061 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.356925964 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.357003927 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.357003927 CEST	60221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.357047081 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.357078075 CEST	443	60221	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.358609915 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.358644009 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.358737946 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.358848095 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.358875990 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.707916975 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.708530903 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.708600044 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.708936930 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.708952904 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.802866936 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.803276062 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.803291082 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.803713083 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.803719997 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.815985918 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.816083908 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.816391945 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.816391945 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.816497087 CEST	60222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.816540003 CEST	443	60222	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.818610907 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.818645954 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.818721056 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.818851948 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.818860054 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.912209988 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.912365913 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.912425041 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.912563086 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.912579060 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.912590027 CEST	60223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.912595034 CEST	443	60223	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.915465117 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.915568113 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.915657043 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.915795088 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.915817976 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.980308056 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.980842113 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.980927944 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:27.981231928 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:27.981245995 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.009479046 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.009941101 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.010001898 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.010281086 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.010294914 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.110007048 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.110091925 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.110200882 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.110599041 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.110599041 CEST	60224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.110646963 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.110677004 CEST	443	60224	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.112487078 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.113029003 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.113054991 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.113464117 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.113471985 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.113475084 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.113533020 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.113596916 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.113749981 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.113764048 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.119149923 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.119215012 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.119301081 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.119393110 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.119394064 CEST	60227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.119409084 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.119429111 CEST	443	60227	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.121567011 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.121597052 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.121651888 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.121782064 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.121792078 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.241085052 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.241240978 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.241321087 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.241507053 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.241542101 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.241570950 CEST	60226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.241586924 CEST	443	60226	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.244857073 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.244899988 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.244975090 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.245153904 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.245163918 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.543697119 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.544291973 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.544306040 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.544751883 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.544758081 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.650270939 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.650737047 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.650759935 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.651189089 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.651195049 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.653251886 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.653381109 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.653439999 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.653650999 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.653650999 CEST	60228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.653666973 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.653676033 CEST	443	60228	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.656992912 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.657041073 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.657124043 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.657273054 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.657293081 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.755331039 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.755417109 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.755537987 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.755583048 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.755583048 CEST	60229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.755604029 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.755616903 CEST	443	60229	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.757680893 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.757723093 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.757801056 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.757947922 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.757963896 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.825896025 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.826426029 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.826447010 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.826843023 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.826848030 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.827956915 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.828375101 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.828422070 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.828588009 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.828597069 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.926141977 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.926209927 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.926479101 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.926479101 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.926563978 CEST	60231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.926579952 CEST	443	60231	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.929451942 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.929497957 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.929644108 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.929822922 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.929832935 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.960102081 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.960190058 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.960290909 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.960416079 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.960439920 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.960459948 CEST	60230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.960468054 CEST	443	60230	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.963140011 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.963177919 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:28.963448048 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.963613033 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:28.963623047 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.017842054 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.018335104 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.018352985 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.019409895 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.019412994 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.122245073 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.122318029 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.122368097 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.122617960 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.122618914 CEST	60232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.122634888 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.122643948 CEST	443	60232	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.125514030 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.125550985 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.125613928 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.125741959 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.125746965 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.367932081 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.368350029 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.368391991 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.368769884 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.368776083 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.418066025 CEST	62458	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:29:29.427407980 CEST	53	62458	1.1.1.1	192.168.2.4
Oct 10, 2024 20:29:29.427474976 CEST	62458	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:29:29.427539110 CEST	62458	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:29:29.432748079 CEST	53	62458	1.1.1.1	192.168.2.4
Oct 10, 2024 20:29:29.443821907 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.444453955 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.444513083 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.444960117 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.444974899 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.479614019 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.479769945 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.479835987 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.479928017 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.479952097 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.479965925 CEST	60233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.479974031 CEST	443	60233	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.482445955 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.482481956 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.482547998 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.482726097 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.482739925 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.582237005 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.582382917 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.582461119 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.582654953 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.582654953 CEST	60234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.582700014 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.582726955 CEST	443	60234	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.585458994 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.585561991 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.585640907 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.585819006 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.585841894 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.617696047 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.618176937 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.618194103 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.618633986 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.618638992 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.686669111 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.687163115 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.687203884 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.687573910 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.687588930 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.749589920 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.749722958 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.749785900 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.749969959 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.749983072 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.749993086 CEST	60235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.749999046 CEST	443	60235	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.753130913 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.753174067 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.753230095 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.753367901 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.753377914 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.813291073 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.813370943 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.813497066 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.813620090 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.813620090 CEST	60236	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.813652039 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.813674927 CEST	443	60236	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.816411972 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.816437960 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.816507101 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.816673040 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.816689014 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.830008984 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.830344915 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.830368996 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.830740929 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.830745935 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.927898884 CEST	53	62458	1.1.1.1	192.168.2.4
Oct 10, 2024 20:29:29.928169966 CEST	62458	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:29:29.942461967 CEST	53	62458	1.1.1.1	192.168.2.4
Oct 10, 2024 20:29:29.943284035 CEST	62458	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:29:29.969106913 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.969166040 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.969278097 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.969403982 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.969424009 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.969436884 CEST	60237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.969444036 CEST	443	60237	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.972101927 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.972130060 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:29.972244024 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.972388029 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:29.972399950 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.238152027 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.238656044 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.238683939 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.239074945 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.239084959 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.368163109 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.368316889 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.368443012 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.368479013 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.368496895 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.368508101 CEST	62459	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.368513107 CEST	443	62459	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.371076107 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.371120930 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.371207952 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.371345043 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.371355057 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.379920959 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.380295038 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.380346060 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.380678892 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.380690098 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.491420031 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.491511106 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.491728067 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.491784096 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.491785049 CEST	62460	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.491823912 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.491848946 CEST	443	62460	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.494458914 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.494508028 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.494657993 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.494818926 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.494836092 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.505927086 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.506311893 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.506345987 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.506701946 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.506706953 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.609945059 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.610039949 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.610194921 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.610419035 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.610471964 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.610482931 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.610524893 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.610546112 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.610558033 CEST	62461	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.610565901 CEST	443	62461	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.611011028 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.611016035 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.613107920 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.613140106 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.613275051 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.613492966 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.613506079 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.726854086 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.726927042 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.727091074 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.727140903 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.727159977 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.727170944 CEST	62462	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.727178097 CEST	443	62462	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.729536057 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.729568005 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.729629040 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.729760885 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.729779005 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.740190029 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.740622044 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.740629911 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.740982056 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.740987062 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.876146078 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.876203060 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.876313925 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.876475096 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.876475096 CEST	62464	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.876490116 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.876497030 CEST	443	62464	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.879168034 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.879261017 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:30.879363060 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.879511118 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:30.879529953 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.191551924 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.192132950 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.192168951 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.192467928 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.192485094 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.286941051 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.287533998 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.287595034 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.287834883 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.287849903 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.375221968 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.375447989 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.375643969 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.375644922 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.375644922 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.378341913 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.378437042 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.378525019 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.378659010 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.378680944 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.451263905 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.451726913 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.451745987 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.452168941 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.452178955 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.491420984 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.491589069 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.491667986 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.491754055 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.491754055 CEST	62466	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.491800070 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.491827965 CEST	443	62466	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.494529963 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.494575977 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.494663000 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.494844913 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.494858980 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.593993902 CEST	62465	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.594029903 CEST	443	62465	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.624687910 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.625188112 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.625212908 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.625627995 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.625633955 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.634916067 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.635097027 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.635154009 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.635215998 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.635241985 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.635257006 CEST	62467	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.635263920 CEST	443	62467	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.637944937 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.638030052 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.638153076 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.638319969 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.638344049 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.728053093 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.728225946 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.728291035 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.728378057 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.728395939 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.728409052 CEST	62468	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.728414059 CEST	443	62468	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.731231928 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.731276989 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.731340885 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.731504917 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.731517076 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.763442039 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.763876915 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.763938904 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.764372110 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.764385939 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.880464077 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.880534887 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.880584002 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.886863947 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.886909962 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.886998892 CEST	62469	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.887015104 CEST	443	62469	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.899353981 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.899435997 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:31.899643898 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.899796009 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:31.899810076 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.111181021 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:32.111224890 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:32.111355066 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:32.112159967 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:32.112179041 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:32.138991117 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.139472961 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.139506102 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.139894009 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.139899969 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.218067884 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.218674898 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.218727112 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.219104052 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.219122887 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.249656916 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.249794006 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.249903917 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.249959946 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.249984026 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.249999046 CEST	62470	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.250006914 CEST	443	62470	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.253474951 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.253509998 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.253654957 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.253818989 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.253833055 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.320822001 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.321003914 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.321084976 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.321175098 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.321208954 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.321235895 CEST	62471	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.321250916 CEST	443	62471	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.323864937 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.323937893 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.324124098 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.324285030 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.324306965 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.325018883 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.325459003 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.325500965 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.325850010 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.325855970 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.426295042 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.426457882 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.426707029 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.426759958 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.426759958 CEST	62472	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.426786900 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.426800013 CEST	443	62472	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.429449081 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.429517984 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.429608107 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.429784060 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.429802895 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.450057983 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.450534105 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.450572014 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.450975895 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.450982094 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.554670095 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.554847956 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.554951906 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.555018902 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.555042028 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.555054903 CEST	62473	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.555062056 CEST	443	62473	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.558248997 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.558289051 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.558475971 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.559449911 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.559463978 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.578250885 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.578639030 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.578660011 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.579032898 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.579037905 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.685895920 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.685961962 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.686141968 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.686229944 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.686253071 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.686268091 CEST	62474	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.686275005 CEST	443	62474	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.689275026 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.689366102 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.689451933 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.689579964 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.689600945 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.778428078 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:32.778748989 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:32.778779030 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:32.779234886 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:32.779616117 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:32.779715061 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:32.830204964 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:32.914433956 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.914948940 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.914975882 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.915368080 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.915373087 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.983747005 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.984165907 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.984237909 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:32.984527111 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:32.984540939 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.021541119 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.021609068 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.021840096 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.021840096 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.021881104 CEST	62476	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.021897078 CEST	443	62476	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.024563074 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.024655104 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.026129007 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.026273012 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.026293039 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.092209101 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.092353106 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.092427015 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.092556953 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.092591047 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.092617035 CEST	62477	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.092631102 CEST	443	62477	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.095201969 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.095276117 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.095468044 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.095598936 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.095621109 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.105602980 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.105945110 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.105978966 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.106374979 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.106388092 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.217945099 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.218101025 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.218173981 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.218281031 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.218281031 CEST	62478	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.218312979 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.218334913 CEST	443	62478	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.220843077 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.220905066 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.220974922 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.221115112 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.221131086 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.230829954 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.231268883 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.231296062 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.232238054 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.232243061 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.348618031 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.349139929 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.349185944 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.349554062 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.349564075 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.352632046 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.352796078 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.352854013 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.352894068 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.352894068 CEST	62479	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.352907896 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.352916002 CEST	443	62479	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.355464935 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.355556011 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.355685949 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.355809927 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.355832100 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.458864927 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.459032059 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.459095955 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.459249020 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.459249020 CEST	62480	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.459269047 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.459280014 CEST	443	62480	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.462033033 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.462074041 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.462143898 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.462275028 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.462285995 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.696382999 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.696897030 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.696919918 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.697391033 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.697396040 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.796726942 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.796813011 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.796858072 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.797223091 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.797236919 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.797249079 CEST	62481	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.797252893 CEST	443	62481	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.802280903 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.802309990 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.802536011 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.802858114 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.802869081 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.807055950 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.807368040 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.807379961 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.807887077 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.807889938 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.907517910 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.907672882 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.907732010 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:33.924163103 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:33.970103979 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.021317005 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.064677000 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.128365993 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.140454054 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.140465975 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.140979052 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.140983105 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.141072035 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.141118050 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.141239882 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.141268015 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.141294003 CEST	62482	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.141299963 CEST	443	62482	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.141422033 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.141428947 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.142359972 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.142391920 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.142692089 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.142705917 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.144877911 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.144936085 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.145005941 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.145126104 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.145138979 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.236609936 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.236670971 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.236763954 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.236938953 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.236953974 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.237008095 CEST	62485	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.237013102 CEST	443	62485	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.238426924 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.238589048 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.238754034 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.238893986 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.238912106 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.238924980 CEST	62484	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.238929987 CEST	443	62484	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.239885092 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.239972115 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.240050077 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.240194082 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.240217924 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.240607977 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.240756989 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.240926981 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.240926981 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.240926981 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.241698027 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.241727114 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.241807938 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.241931915 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.241940975 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.243077993 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.243088961 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.243141890 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.243252039 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.243263006 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.451404095 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.451905012 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.451920986 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.452445030 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.452450037 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.547507048 CEST	62483	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.547550917 CEST	443	62483	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.551484108 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.551656961 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.551714897 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.551779985 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.551791906 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.551800966 CEST	62486	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.551806927 CEST	443	62486	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.554331064 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.554419994 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.554537058 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.554661989 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.554682016 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.718631029 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.719211102 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.719274044 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.719619989 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.719634056 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.819346905 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.819483042 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.819552898 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.819755077 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.819778919 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.819793940 CEST	62487	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.819801092 CEST	443	62487	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.823452950 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.823535919 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.823626041 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.823767900 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.823788881 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.881913900 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.882488012 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.882507086 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.882909060 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.882914066 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.885148048 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.885473013 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.885509014 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.885795116 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.885801077 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.903107882 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.903491974 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.903515100 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.903824091 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.903829098 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.988782883 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.988866091 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.988924980 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.989239931 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.989258051 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.989270926 CEST	62490	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.989275932 CEST	443	62490	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.989753962 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.989830017 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.989878893 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.990292072 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.990314960 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.990330935 CEST	62488	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.990338087 CEST	443	62488	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.993110895 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.993169069 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.993253946 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.993542910 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.993566990 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.993700027 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.993714094 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:34.993776083 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.993985891 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:34.993998051 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.003631115 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.003690958 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.003762007 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.003966093 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.003977060 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.003988028 CEST	62489	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.003992081 CEST	443	62489	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.006647110 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.006721973 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.006809950 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.007006884 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.007035017 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.422173023 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.422746897 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.422781944 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.423960924 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.423966885 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.523449898 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.523627996 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.523736000 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.530317068 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.530333996 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.530440092 CEST	62491	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.530447006 CEST	443	62491	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.545299053 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.545378923 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.548086882 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.552206993 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.552239895 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.630635977 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.637995005 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.672956944 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.677364111 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.682389021 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.688570976 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.695123911 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.695152044 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.696142912 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.696155071 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.697118044 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.697138071 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.698097944 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.698107958 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.698518991 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.698529005 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.698934078 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.698944092 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.699467897 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.699481964 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.700171947 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.700181007 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.743448019 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 10, 2024 20:29:35.743626118 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 10, 2024 20:29:35.749016047 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 10, 2024 20:29:35.749094009 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 10, 2024 20:29:35.749882936 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 10, 2024 20:29:35.749939919 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 10, 2024 20:29:35.795206070 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.795356989 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.795423031 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.797646046 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.797796011 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.797957897 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.799928904 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.800072908 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.800156116 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.805449963 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.805485010 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.805511951 CEST	62494	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.805526972 CEST	443	62494	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.806862116 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.806900978 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.806927919 CEST	62492	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.806942940 CEST	443	62492	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.809271097 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.809292078 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.809330940 CEST	62495	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.809340954 CEST	443	62495	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.813955069 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.814009905 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.814140081 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.815938950 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.815957069 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.816052914 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.816246986 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.816276073 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.817334890 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.817359924 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.818805933 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.818842888 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.818917990 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.819003105 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.819019079 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.858469009 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.858632088 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.859452009 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.859590054 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.859596968 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.859628916 CEST	62493	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.859633923 CEST	443	62493	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.864191055 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.864249945 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:35.864320040 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.864456892 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:35.864478111 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.221026897 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.221679926 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.221736908 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.222385883 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.222398996 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.325478077 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.325576067 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.325644016 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.325829029 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.325829029 CEST	62496	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.325859070 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.325881958 CEST	443	62496	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.379403114 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.379436016 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.380156994 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.413779974 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.413793087 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.465487003 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.471342087 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.471420050 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.474348068 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.474361897 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.477561951 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.480542898 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.480575085 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.483499050 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.483510971 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.490088940 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.493035078 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.493066072 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.496918917 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.496932030 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.508061886 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.510642052 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.510678053 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.513816118 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.513828039 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.573383093 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.573533058 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.573596001 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.574203968 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.574242115 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.574268103 CEST	62497	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.574282885 CEST	443	62497	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.579422951 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.579457045 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.579690933 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.579839945 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.579865932 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.581159115 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.581305981 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.581367016 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.581428051 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.581428051 CEST	62498	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.581444025 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.581463099 CEST	443	62498	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.583373070 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.583451033 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.583632946 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.583781004 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.583810091 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.598393917 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.598536968 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.598603010 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.598696947 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.598737001 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.598762989 CEST	62499	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.598778963 CEST	443	62499	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.601522923 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.601607084 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.601672888 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.601882935 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.601918936 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.609653950 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.609807968 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.609874964 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.609962940 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.609962940 CEST	62500	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.609994888 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.610018015 CEST	443	62500	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.613980055 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.614010096 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:36.614104986 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.614464045 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:36.614478111 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.095477104 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.102967978 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.102986097 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.112709999 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.112720966 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.238535881 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.239535093 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.239558935 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.240957975 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.240964890 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.242084980 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.242584944 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.242640018 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.243374109 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.243401051 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.247036934 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.247726917 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.247742891 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.248606920 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.248615026 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.315995932 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.316797972 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.316814899 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.317837954 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.317842960 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.340713024 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.340857029 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.340909958 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.341222048 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.341242075 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.341253996 CEST	62503	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.341260910 CEST	443	62503	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.343596935 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.343666077 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.343712091 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.349961996 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.350106955 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.350157976 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.367033958 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.367033958 CEST	62504	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.367069960 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.367093086 CEST	443	62504	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.370294094 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.370311975 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.370328903 CEST	62502	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.370335102 CEST	443	62502	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.375632048 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.375674009 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.375745058 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.379090071 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.379132032 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.379195929 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.380105019 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.380117893 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.380383968 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.380412102 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.383090973 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.383135080 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.383193970 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.383475065 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.383492947 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.424901009 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.425052881 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.425108910 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.425532103 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.425549030 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.425558090 CEST	62505	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.425564051 CEST	443	62505	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.432545900 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.432642937 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:37.432717085 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.432954073 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:37.432988882 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.027081966 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.027698040 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.027713060 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.028378010 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.028554916 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.028561115 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.029063940 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.029115915 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.029509068 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.029519081 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.034991026 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.044960022 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.045015097 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.053100109 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.053105116 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.267637968 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.267668962 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.267725945 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.267751932 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.267751932 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.267791033 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.267882109 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.267947912 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.268846989 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.268847942 CEST	62508	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.268919945 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.268955946 CEST	443	62508	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.270926952 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.270953894 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.270971060 CEST	62506	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.270977974 CEST	443	62506	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.273617029 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.274605036 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.274684906 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.275202990 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.275217056 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.277816057 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.277873993 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.278886080 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.278923988 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.278940916 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.279000044 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.279077053 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.279108047 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.279885054 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.279922962 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.360532045 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.360719919 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.360793114 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.361344099 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.361383915 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.361421108 CEST	62507	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.361435890 CEST	443	62507	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.364751101 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.364782095 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.367686987 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.367942095 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.367955923 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.372864962 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.373029947 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.373090029 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.373857021 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.373857021 CEST	62509	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.373902082 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.373929024 CEST	443	62509	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.401145935 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.401242971 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.401321888 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.401580095 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.401614904 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.930007935 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.930444956 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.930506945 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.930896044 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.930910110 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.961771965 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.962296963 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.962357998 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:38.962526083 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:38.962542057 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029007912 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029175043 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029309034 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029329062 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.029345989 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029375076 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.029522896 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.029546976 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029562950 CEST	62511	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.029570103 CEST	443	62511	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.029795885 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.029803038 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.032675982 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.032740116 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.032804966 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.033063889 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.033088923 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.053518057 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.054052114 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.054085970 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.054666042 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.054677963 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.086316109 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.086369991 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.086510897 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.086564064 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.086626053 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.086668968 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.086668968 CEST	62510	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.086714029 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.086745024 CEST	443	62510	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.089437008 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.089464903 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.089526892 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.089665890 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.089673042 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129132986 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129159927 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129201889 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.129216909 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129292965 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.129411936 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.129415989 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129429102 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.129580021 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129618883 CEST	443	62512	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.129656076 CEST	62512	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.131822109 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.131865978 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.131933928 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.132051945 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.132064104 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.177350998 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.177407980 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.177489996 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.177551985 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.177598953 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.177666903 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.177769899 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.177809954 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.177838087 CEST	62513	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.177851915 CEST	443	62513	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.180480957 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.180562019 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.180691957 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.180864096 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.180883884 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.949003935 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.949500084 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.949549913 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.949716091 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.949955940 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.949970961 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.950048923 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.950067043 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:39.950345039 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:39.950351954 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.062496901 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.062644005 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.062665939 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.062758923 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.062824965 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.062889099 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.063415051 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.063415051 CEST	62515	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.063432932 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.063441038 CEST	443	62515	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.064419985 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.064419985 CEST	62514	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.064454079 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.064479113 CEST	443	62514	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.066972971 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.067022085 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.067073107 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.067121983 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.067261934 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.067274094 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.067379951 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.067397118 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.067425966 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.067440987 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.147217035 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.147735119 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.147767067 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.148169994 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.148175955 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.200836897 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.200972080 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.201028109 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.201134920 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.201134920 CEST	62501	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.201142073 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.201143980 CEST	443	62501	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.203917980 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.203969002 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.204042912 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.204168081 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.204178095 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.306474924 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.312069893 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.312141895 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.312186956 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.312186956 CEST	62517	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.312207937 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.312222004 CEST	443	62517	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.314502954 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.314551115 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.315161943 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.315304995 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.315325975 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.481898069 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.482368946 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.482407093 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.482789040 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.482800961 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.979048014 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.979214907 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.979295015 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.979507923 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.979547977 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.979577065 CEST	62516	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.979592085 CEST	443	62516	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.982894897 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.982989073 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:40.983081102 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.983262062 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:40.983290911 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.355237007 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.355870962 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.355925083 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.356511116 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.356522083 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.364516973 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.364871979 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.364926100 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.365380049 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.365386963 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.477169991 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.477252007 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.477463961 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.477592945 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.477592945 CEST	62519	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.477632999 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.477658987 CEST	443	62519	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.480957031 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.480992079 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.481172085 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.481348038 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.481369972 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.481719017 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.482084036 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.482162952 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.482649088 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.482662916 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.484530926 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.484663010 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.484888077 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.484926939 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.484949112 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.484963894 CEST	62518	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.484971046 CEST	443	62518	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.487325907 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.487430096 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.487549067 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.487672091 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.487704039 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.581588984 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.582104921 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.582170010 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.582441092 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.582458019 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.613811016 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.613989115 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.614115000 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.614202023 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.614202023 CEST	62520	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.614248037 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.614279985 CEST	443	62520	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.616363049 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.616409063 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.616583109 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.616695881 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.616709948 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.717617035 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.717792034 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.717885971 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.717937946 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.717937946 CEST	62521	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.717959881 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.717974901 CEST	443	62521	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.721030951 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.721060991 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.721201897 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.721371889 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.721390009 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.901678085 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.902375937 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.902439117 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:41.902834892 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:41.902851105 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.071095943 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.071245909 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.071490049 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.071490049 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.071490049 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.074214935 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.074282885 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.074436903 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.074563026 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.074580908 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.209105968 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.209673882 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.209698915 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.210294962 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.210300922 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.269056082 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.269469023 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.269495964 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.270026922 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.270031929 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.331844091 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.331919909 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.331998110 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.333880901 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.333900928 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.333916903 CEST	62524	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.333921909 CEST	443	62524	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.347336054 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.347428083 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.347551107 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.347822905 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.347858906 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.350383043 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.350960970 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.350970030 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.351644993 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.351649046 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.375510931 CEST	62523	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.375566959 CEST	443	62523	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.409384966 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.409451962 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.409567118 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.409630060 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.410063982 CEST	62525	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.410075903 CEST	443	62525	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.414016962 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.414062977 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.414143085 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.414288998 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.414309025 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.491636038 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.491791964 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.491851091 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.492186069 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.492201090 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.492213011 CEST	62526	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.492218018 CEST	443	62526	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.497361898 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.497456074 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.497791052 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.498073101 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.498110056 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.520169973 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.524341106 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.524354935 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.524936914 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.524941921 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.717945099 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:42.718112946 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:42.718170881 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:42.722467899 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.722546101 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.722623110 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.722635031 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.722670078 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.722723961 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.722901106 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.722915888 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.722924948 CEST	62527	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.722929955 CEST	443	62527	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.726129055 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.726146936 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.726212978 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.726506948 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.726519108 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.944299936 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.944931984 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.944962978 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:42.945709944 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:42.945724010 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.118325949 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.118506908 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.118566036 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.119194984 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.119221926 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.119239092 CEST	62528	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.119246960 CEST	443	62528	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.128992081 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.129089117 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.129209995 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.129515886 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.129568100 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.163255930 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.163949013 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.163985968 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.164649963 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.164664984 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.263911009 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.264870882 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.264905930 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.265461922 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.265477896 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.331594944 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.334739923 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.334912062 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.334912062 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.334912062 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.337476015 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.337522984 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.337670088 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.337848902 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.337878942 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.358724117 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.359088898 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.359118938 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.359483004 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.359489918 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.640919924 CEST	62529	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.640960932 CEST	443	62529	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.819751978 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.819977999 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.820025921 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.820085049 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.820101976 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.820219040 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.820230961 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.820281029 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.820734024 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.820780993 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.820811987 CEST	62531	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.820827961 CEST	443	62531	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.822807074 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.822853088 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.822892904 CEST	62530	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.822909117 CEST	443	62530	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.824312925 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.825320005 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.825335979 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.826030970 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.826034069 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.828141928 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.828167915 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.828382969 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.828602076 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.828614950 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.829873085 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.829931021 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.830029964 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.830456972 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:43.830476046 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:43.863965034 CEST	62475	443	192.168.2.4	142.250.185.132
Oct 10, 2024 20:29:43.863974094 CEST	443	62475	142.250.185.132	192.168.2.4
Oct 10, 2024 20:29:44.009377003 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.009546995 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.009601116 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.009865999 CEST	62532	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.009871960 CEST	443	62532	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.014162064 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.014225006 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.014317036 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.014626026 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.014656067 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.306751013 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.307333946 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.307410955 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.308542013 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.308556080 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.541089058 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.541202068 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.541280985 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.541465998 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.541465998 CEST	62534	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.541506052 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.541528940 CEST	443	62534	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.543987989 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.544055939 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.544146061 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.544282913 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.544301987 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.835624933 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.836137056 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.836158991 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.836568117 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.836572886 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.841912031 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.842314959 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.842328072 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.842777967 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:44.842782021 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:44.992155075 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.003463984 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.003525019 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.003634930 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.003688097 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.010059118 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.010092974 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.010454893 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.010623932 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.010677099 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.014818907 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.014831066 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.015166998 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.015187979 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.015197992 CEST	62536	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.015202999 CEST	443	62536	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.016709089 CEST	62535	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.016724110 CEST	443	62535	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.041672945 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.041699886 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.041771889 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.042361021 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.042371988 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.043171883 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.043262959 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.043338060 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.043481112 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.043517113 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.150074005 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.150155067 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.150230885 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.150269985 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.150302887 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.150362015 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.150758028 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.150758028 CEST	62537	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.150787115 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.150809050 CEST	443	62537	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.155353069 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.155450106 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.155596972 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.155881882 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.155917883 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.375629902 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.376893044 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.376972914 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.377614975 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.377629995 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.449223042 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.449803114 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.449861050 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.450540066 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.450552940 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.524230957 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.524396896 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.524918079 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.525141954 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.525142908 CEST	62533	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.525182009 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.525204897 CEST	443	62533	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.528640985 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.528733015 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.528884888 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.529099941 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.529133081 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.586805105 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.586875916 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.586934090 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.587172985 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.587192059 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.587205887 CEST	62538	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.587213039 CEST	443	62538	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.590318918 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.590410948 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.590500116 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.590615988 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.590636969 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.849324942 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.849802971 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.849822998 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.850359917 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.850363970 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.893275976 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.893695116 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.893738031 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.894396067 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.894407034 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.951371908 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.951762915 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.951797962 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.952364922 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.952377081 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.979255915 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.979458094 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.980242014 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.980360031 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.980372906 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.980382919 CEST	62539	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.980386972 CEST	443	62539	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.982945919 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.983016968 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:45.983094931 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.983227968 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:45.983259916 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.031512976 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.031666994 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.031733990 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.031780958 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.031780958 CEST	62540	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.031806946 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.031829119 CEST	443	62540	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.034257889 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.034288883 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.034343958 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.034493923 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.034506083 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.107002020 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.107038021 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.107091904 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.107098103 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.107161045 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.107347012 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.107366085 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.107378960 CEST	62541	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.107395887 CEST	443	62541	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.110378981 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.110404015 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.110569000 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.110809088 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.110822916 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.297367096 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.299859047 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.299916029 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.300379038 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.300390959 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.305871010 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.306170940 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.306233883 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.306914091 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.306926966 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.427535057 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.427696943 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.427795887 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.427944899 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.427982092 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.428008080 CEST	62542	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.428023100 CEST	443	62542	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.431009054 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.431123972 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.431262016 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.431425095 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.431446075 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.444520950 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.444581032 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.444696903 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.444756031 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.444793940 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.444818974 CEST	62543	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.444833040 CEST	443	62543	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.446851015 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.446899891 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.446970940 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.447094917 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.447112083 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.721857071 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.722368002 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.722409964 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.722789049 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.722815990 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.854207039 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.854775906 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.854794979 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.855218887 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.855222940 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.869448900 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.869854927 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.869860888 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.870253086 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.870255947 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.872775078 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.872940063 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.873006105 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.873073101 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.873085976 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.873096943 CEST	62544	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.873101950 CEST	443	62544	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.876099110 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.876147985 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:46.876323938 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.876478910 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:46.876492977 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.027978897 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.028068066 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.028110027 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.028122902 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.028227091 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.028279066 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.028359890 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.028373957 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.028382063 CEST	62545	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.028388023 CEST	443	62545	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.031450033 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.031538010 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.031997919 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.032155037 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.032181978 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.038841963 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.039000034 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.039074898 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.039105892 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.039119005 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.039132118 CEST	62546	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.039136887 CEST	443	62546	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.041198015 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.041290045 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.041398048 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.041526079 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.041558981 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.303097963 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.303729057 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.303823948 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.304160118 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.304173946 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.349896908 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.350393057 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.350440979 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.350675106 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.350689888 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.443217039 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.443284035 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.443453074 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.443572044 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.443572044 CEST	62547	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.443620920 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.443654060 CEST	443	62547	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.446327925 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.446400881 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.446523905 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.446675062 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.446707964 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.829453945 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.829530954 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.829709053 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.829829931 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.829885006 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.829917908 CEST	62548	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.829932928 CEST	443	62548	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.832837105 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.832887888 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:47.832951069 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.833091021 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:47.833108902 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.039999962 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.040616989 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.040659904 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.041055918 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.041068077 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.041151047 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.041594982 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.041626930 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.042066097 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.042076111 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.051249981 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.051589012 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.051629066 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.051959991 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.051969051 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.171456099 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.173463106 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.173547029 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.173645020 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.173645020 CEST	62550	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.173692942 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.173722982 CEST	443	62550	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.176470041 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.176517963 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.177648067 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.177906990 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.177922964 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.184889078 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.184935093 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.185010910 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.185034037 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.185051918 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.185106039 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.185162067 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.185179949 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.185203075 CEST	62549	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.185216904 CEST	443	62549	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.186889887 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.186975956 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.187048912 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.187148094 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.187180042 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.206022978 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.206274986 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.206459045 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.206459045 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.206459999 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.207963943 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.208024025 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.208105087 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.208306074 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.208334923 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.516462088 CEST	62551	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.516529083 CEST	443	62551	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.665096998 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.665637970 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.665666103 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.665909052 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.666285992 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.666290998 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.666534901 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.666568041 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.666932106 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.666943073 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.787650108 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.787677050 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.787723064 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.787727118 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.787770033 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.787974119 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.787996054 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.788007021 CEST	62553	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.788013935 CEST	443	62553	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.791140079 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.791171074 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.791296959 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.791429043 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.791443110 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.796112061 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.797358990 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.797409058 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.797595978 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.797595978 CEST	62552	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.797626972 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.797647953 CEST	443	62552	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.799765110 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.799772024 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.799825907 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.799972057 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.799983025 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.977025986 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.983212948 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.983268976 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:48.983655930 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:48.983669043 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.005511045 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.006031990 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.006057978 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.006371975 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.006378889 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.033587933 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.034591913 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.034651995 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.035058975 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.035078049 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.129789114 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.132560015 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.132662058 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.132740974 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.132740974 CEST	62556	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.132782936 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.132808924 CEST	443	62556	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.133754015 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.133827925 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.133888006 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.133922100 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.133963108 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.134017944 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.134017944 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.134017944 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.134068012 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.136267900 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.136317015 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.136430025 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.137450933 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.137468100 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.137592077 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.137701988 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.137727976 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.137763023 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.137787104 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.165409088 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.167819977 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.167877913 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.167922020 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.167922020 CEST	62554	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.167943001 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.167957067 CEST	443	62554	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.169555902 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.169589996 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.169706106 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.169795036 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.169800997 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.359745979 CEST	62555	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.359798908 CEST	443	62555	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.534703016 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.535187960 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.535223007 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.535607100 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.535614014 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.536087036 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.536346912 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.536356926 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.536621094 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.536627054 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.645740032 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.645793915 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.645862103 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.645915985 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.646055937 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.646055937 CEST	62557	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.646075010 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.646083117 CEST	443	62557	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.649313927 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.649333954 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.649559021 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.649660110 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.649666071 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.671261072 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.671312094 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.671435118 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.671452045 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.671456099 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.671468973 CEST	62558	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.671472073 CEST	443	62558	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.673444986 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.673512936 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.673587084 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.673711061 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.673749924 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.873182058 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.873347998 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.873608112 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.873625994 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.873821974 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.873836994 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.874281883 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.874286890 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.874394894 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.874401093 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.881927967 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.882256985 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.882265091 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.882611990 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.882616043 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.982645988 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.982727051 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.982841969 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.982877016 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.982903004 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.982944012 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.982958078 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.982966900 CEST	62561	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.982971907 CEST	443	62561	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.984966040 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.985126019 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.985193014 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.985248089 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.985248089 CEST	62559	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.985279083 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.985301018 CEST	443	62559	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.985982895 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.986031055 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.986090899 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.986255884 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.986273050 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.987534046 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.987624884 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:49.987706900 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.987858057 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:49.987894058 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.133256912 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.133367062 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.133493900 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.133533001 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.133613110 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.133651972 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.133683920 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.133708954 CEST	62560	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.133723974 CEST	443	62560	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.136256933 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.136285067 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.136392117 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.136528015 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.136554003 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.331374884 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.331819057 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.331835032 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.332299948 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.332304955 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.336987019 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.337287903 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.337328911 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.337754011 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.337765932 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.437454939 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.438404083 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.438476086 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.438544989 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.438559055 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.438569069 CEST	62562	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.438572884 CEST	443	62562	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.441154003 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.441225052 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.441308022 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.441459894 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.441485882 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.447732925 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.448240042 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.448297977 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.448348999 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.448348999 CEST	62563	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.448373079 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.448394060 CEST	443	62563	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.450603008 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.450647116 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.450704098 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.450800896 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.450819969 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.670444965 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.670902967 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.670965910 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.671330929 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.671344995 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.673325062 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.673660994 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.673701048 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.674168110 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.674175024 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.782066107 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.783102036 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.783174038 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.783231974 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.783231974 CEST	62564	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.783267975 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.783289909 CEST	443	62564	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.786070108 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.786118031 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.786175013 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.786307096 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.786323071 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.786479950 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.787667990 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.787708044 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.787723064 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.787758112 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.787798882 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.787822962 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.787837029 CEST	62565	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.787844896 CEST	443	62565	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.790172100 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.790204048 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.790255070 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.790594101 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.790615082 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.867086887 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.867551088 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.867594004 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.868336916 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.868346930 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.996036053 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.996200085 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.996444941 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.996489048 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.996511936 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.996525049 CEST	62566	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:50.996534109 CEST	443	62566	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:50.999901056 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.000001907 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.000142097 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.000319004 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.000358105 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.184573889 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.185228109 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.185256958 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.185640097 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.185646057 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.188705921 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.189332008 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.189418077 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.189766884 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.189781904 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.340975046 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.341011047 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.341072083 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.341133118 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.341617107 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.341636896 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.341655016 CEST	62567	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.341661930 CEST	443	62567	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.345633984 CEST	62572	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.345731020 CEST	443	62572	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.345845938 CEST	62572	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.346098900 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.346194983 CEST	62572	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.346261024 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.346278906 CEST	443	62572	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.346503973 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.346503973 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.346503973 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.349710941 CEST	62573	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.349746943 CEST	443	62573	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.349839926 CEST	62573	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.350025892 CEST	62573	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.350044966 CEST	443	62573	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.555005074 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.555638075 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.555684090 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.556246996 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.556260109 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.593183994 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.594181061 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.594194889 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.595012903 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.595017910 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.657207966 CEST	62568	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.657278061 CEST	443	62568	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.708570957 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.708664894 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.708765030 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.709033012 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.709057093 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.709069967 CEST	62570	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.709076881 CEST	443	62570	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.715418100 CEST	62574	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.715471029 CEST	443	62574	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.715658903 CEST	62574	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.719418049 CEST	62574	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.719434977 CEST	443	62574	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.731812954 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.731977940 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.732059956 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.732089043 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.732105970 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.732126951 CEST	62569	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.732136965 CEST	443	62569	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.735507011 CEST	62575	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.735600948 CEST	443	62575	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.735712051 CEST	62575	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.735896111 CEST	62575	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.735934019 CEST	443	62575	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.779135942 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.779624939 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.779701948 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.780328035 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.780380011 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.894757986 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.896147013 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.896200895 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.896334887 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.896334887 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.896334887 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.896430016 CEST	62571	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.896470070 CEST	443	62571	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.899471998 CEST	62576	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.899558067 CEST	443	62576	13.107.246.45	192.168.2.4
Oct 10, 2024 20:29:51.899635077 CEST	62576	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.899827003 CEST	62576	443	192.168.2.4	13.107.246.45
Oct 10, 2024 20:29:51.899867058 CEST	443	62576	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 20:28:27.639077902 CEST	53	59007	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:27.640130997 CEST	53	52906	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:28.843620062 CEST	53	51877	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:28.971375942 CEST	49461	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:28.972071886 CEST	58721	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:28.987809896 CEST	53	58721	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:28.992233038 CEST	53	49461	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.821039915 CEST	64156	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.821358919 CEST	56410	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.821599960 CEST	51528	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.821842909 CEST	61152	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.822515011 CEST	58737	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.822643995 CEST	62108	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.823997021 CEST	53136	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.824227095 CEST	64776	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.825448990 CEST	58937	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.825743914 CEST	50090	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:29.830073118 CEST	53	51528	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.830092907 CEST	53	62108	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.838798046 CEST	53	61152	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.840337038 CEST	53	64156	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.840367079 CEST	53	58737	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.841552973 CEST	53	56410	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.842715979 CEST	53	50090	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.842936039 CEST	53	53136	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.843333960 CEST	53	58937	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:29.844039917 CEST	53	64776	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.386595011 CEST	65364	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.386969090 CEST	58401	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.392210007 CEST	50331	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.392366886 CEST	51393	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.393776894 CEST	53	65364	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.394073009 CEST	53	58401	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.409140110 CEST	53	51393	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.410751104 CEST	53	50331	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.699568987 CEST	57932	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.699734926 CEST	50114	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.718952894 CEST	53	50114	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.719016075 CEST	53	57932	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.905819893 CEST	64209	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.905920982 CEST	50948	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.924395084 CEST	53	50948	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.924823999 CEST	53	64209	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.964566946 CEST	59472	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.964782000 CEST	55531	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:31.971749067 CEST	53	59472	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:31.971766949 CEST	53	55531	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.050185919 CEST	56229	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.050476074 CEST	51959	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.057876110 CEST	53	56229	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.057897091 CEST	53	51959	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.067692041 CEST	53	64345	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.180345058 CEST	62236	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.180531979 CEST	55073	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.187117100 CEST	53	62236	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.187381029 CEST	53	55073	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.204221964 CEST	59736	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.204751968 CEST	62618	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.221826077 CEST	53	59736	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.222630978 CEST	53	62618	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.600366116 CEST	53674	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.600511074 CEST	52159	53	192.168.2.4	1.1.1.1
Oct 10, 2024 20:28:32.607724905 CEST	53	52159	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:32.608113050 CEST	53	53674	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:44.650141954 CEST	53	60067	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:45.901365042 CEST	53	59377	1.1.1.1	192.168.2.4
Oct 10, 2024 20:28:47.285378933 CEST	138	138	192.168.2.4	192.168.2.255
Oct 10, 2024 20:28:49.965159893 CEST	53	63175	1.1.1.1	192.168.2.4
Oct 10, 2024 20:29:27.324290037 CEST	53	64310	1.1.1.1	192.168.2.4
Oct 10, 2024 20:29:29.417710066 CEST	53	54697	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 20:28:28.971375942 CEST	192.168.2.4	1.1.1.1	0xac13	Standard query (0)	darwynnfulfillment.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:28.972071886 CEST	192.168.2.4	1.1.1.1	0x91dd	Standard query (0)	darwynnfulfillment.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:29.821039915 CEST	192.168.2.4	1.1.1.1	0x2e4a	Standard query (0)	assets1.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.821358919 CEST	192.168.2.4	1.1.1.1	0x39d1	Standard query (0)	assets1.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:29.821599960 CEST	192.168.2.4	1.1.1.1	0xa2e5	Standard query (0)	assets10.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.821842909 CEST	192.168.2.4	1.1.1.1	0x471	Standard query (0)	assets10.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:29.822515011 CEST	192.168.2.4	1.1.1.1	0x8c5e	Standard query (0)	assets8.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.822643995 CEST	192.168.2.4	1.1.1.1	0x820	Standard query (0)	assets8.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:29.823997021 CEST	192.168.2.4	1.1.1.1	0x268	Standard query (0)	assets2.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.824227095 CEST	192.168.2.4	1.1.1.1	0x6a02	Standard query (0)	assets2.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:29.825448990 CEST	192.168.2.4	1.1.1.1	0x1ad5	Standard query (0)	assets7.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.825743914 CEST	192.168.2.4	1.1.1.1	0x8c55	Standard query (0)	assets7.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:31.386595011 CEST	192.168.2.4	1.1.1.1	0xc628	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.386969090 CEST	192.168.2.4	1.1.1.1	0xa40f	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:31.392210007 CEST	192.168.2.4	1.1.1.1	0x52e1	Standard query (0)	assets7.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.392366886 CEST	192.168.2.4	1.1.1.1	0x2622	Standard query (0)	assets7.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:31.699568987 CEST	192.168.2.4	1.1.1.1	0x7de3	Standard query (0)	assets8.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.699734926 CEST	192.168.2.4	1.1.1.1	0xe9e2	Standard query (0)	assets8.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:31.905819893 CEST	192.168.2.4	1.1.1.1	0xee48	Standard query (0)	assets2.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.905920982 CEST	192.168.2.4	1.1.1.1	0x642a	Standard query (0)	assets2.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:31.964566946 CEST	192.168.2.4	1.1.1.1	0xd304	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.964782000 CEST	192.168.2.4	1.1.1.1	0xaae	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:32.050185919 CEST	192.168.2.4	1.1.1.1	0xebc6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.050476074 CEST	192.168.2.4	1.1.1.1	0xddfe	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:32.180345058 CEST	192.168.2.4	1.1.1.1	0x6f55	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.180531979 CEST	192.168.2.4	1.1.1.1	0xe12c	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:32.204221964 CEST	192.168.2.4	1.1.1.1	0x8eb6	Standard query (0)	darwynnfulfillment.freshdesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.204751968 CEST	192.168.2.4	1.1.1.1	0x2290	Standard query (0)	darwynnfulfillment.freshdesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:28:32.600366116 CEST	192.168.2.4	1.1.1.1	0xb82e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.600511074 CEST	192.168.2.4	1.1.1.1	0xe8f0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 20:28:28.992233038 CEST	1.1.1.1	192.168.2.4	0xac13	No error (0)	darwynnfulfillment.freshdesk.com		54.85.43.134	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:28.992233038 CEST	1.1.1.1	192.168.2.4	0xac13	No error (0)	darwynnfulfillment.freshdesk.com		52.3.125.17	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:28.992233038 CEST	1.1.1.1	192.168.2.4	0xac13	No error (0)	darwynnfulfillment.freshdesk.com		54.158.184.166	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:28.992233038 CEST	1.1.1.1	192.168.2.4	0xac13	No error (0)	darwynnfulfillment.freshdesk.com		18.215.41.145	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:28.992233038 CEST	1.1.1.1	192.168.2.4	0xac13	No error (0)	darwynnfulfillment.freshdesk.com		54.163.169.242	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.830073118 CEST	1.1.1.1	192.168.2.4	0xa2e5	No error (0)	assets10.freshdesk.com		52.222.225.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.840337038 CEST	1.1.1.1	192.168.2.4	0x2e4a	No error (0)	assets1.freshdesk.com		18.239.81.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.840367079 CEST	1.1.1.1	192.168.2.4	0x8c5e	No error (0)	assets8.freshdesk.com		52.222.225.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.842936039 CEST	1.1.1.1	192.168.2.4	0x268	No error (0)	assets2.freshdesk.com		52.222.225.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:29.843333960 CEST	1.1.1.1	192.168.2.4	0x1ad5	No error (0)	assets7.freshdesk.com		52.222.225.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		3.5.21.134	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		52.216.171.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		54.231.202.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		52.217.169.144	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		52.217.142.56	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		52.217.236.168	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		54.231.224.8	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.393776894 CEST	1.1.1.1	192.168.2.4	0xc628	No error (0)	s3.amazonaws.com		52.217.199.32	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.410751104 CEST	1.1.1.1	192.168.2.4	0x52e1	No error (0)	assets7.freshdesk.com		52.222.225.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.719016075 CEST	1.1.1.1	192.168.2.4	0x7de3	No error (0)	assets8.freshdesk.com		18.245.195.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.924823999 CEST	1.1.1.1	192.168.2.4	0xee48	No error (0)	assets2.freshdesk.com		18.245.195.5	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.971749067 CEST	1.1.1.1	192.168.2.4	0xd304	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.971749067 CEST	1.1.1.1	192.168.2.4	0xd304	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:31.971766949 CEST	1.1.1.1	192.168.2.4	0xaae	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 10, 2024 20:28:32.057876110 CEST	1.1.1.1	192.168.2.4	0xebc6	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.057897091 CEST	1.1.1.1	192.168.2.4	0xddfe	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		52.217.140.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		52.216.133.77	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		52.217.102.198	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		16.182.32.224	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		16.182.105.64	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		52.216.177.69	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		52.217.92.246	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.187117100 CEST	1.1.1.1	192.168.2.4	0x6f55	No error (0)	s3.amazonaws.com		52.217.119.16	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.221826077 CEST	1.1.1.1	192.168.2.4	0x8eb6	No error (0)	darwynnfulfillment.freshdesk.com		54.85.43.134	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.221826077 CEST	1.1.1.1	192.168.2.4	0x8eb6	No error (0)	darwynnfulfillment.freshdesk.com		54.158.184.166	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.221826077 CEST	1.1.1.1	192.168.2.4	0x8eb6	No error (0)	darwynnfulfillment.freshdesk.com		54.163.169.242	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.221826077 CEST	1.1.1.1	192.168.2.4	0x8eb6	No error (0)	darwynnfulfillment.freshdesk.com		52.3.125.17	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.221826077 CEST	1.1.1.1	192.168.2.4	0x8eb6	No error (0)	darwynnfulfillment.freshdesk.com		18.215.41.145	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.607724905 CEST	1.1.1.1	192.168.2.4	0xe8f0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 10, 2024 20:28:32.608113050 CEST	1.1.1.1	192.168.2.4	0xb82e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:32.608113050 CEST	1.1.1.1	192.168.2.4	0xb82e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:28:42.588107109 CEST	1.1.1.1	192.168.2.4	0x4a06	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:28:42.588107109 CEST	1.1.1.1	192.168.2.4	0x4a06	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:29:23.337812901 CEST	1.1.1.1	192.168.2.4	0xc88a	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:29:23.337812901 CEST	1.1.1.1	192.168.2.4	0xc88a	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

darwynnfulfillment.freshdesk.com

https:

assets7.freshdesk.com

assets10.freshdesk.com

assets1.freshdesk.com

assets2.freshdesk.com

assets8.freshdesk.com

s3.amazonaws.com

cdnjs.cloudflare.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	54.85.43.134	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:29 UTC	703	OUT	GET /register/Xo7ehwav33TcneRvnq7 HTTP/1.1 Host: darwynnfulfillment.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:29 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:28:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK X-Request-Id: c457740a-9a71-41a0-9d8b-1da852152ba9 Etag: W/"108c4dee7bdec167032fc1aafe87046c" X-Frame-Options: SAMEORIGIN Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubDomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: _x_w=45_1; path=/; HttpOnly; secure Set-Cookie: _helpkit_session=N05ZZmNZdEluWUtWcmFpYTI5UmNsSStoQkVqM0MwZTcrQlVXcGQ3a3F1b0VML0w2bnJWR0ZHQnJScjJsMVJMYjVDSmpLNWpkVlo2eTdVNmcxeWFqMjBPOFgyTTVTNlRYZW9FaUQvdGdQcnFDUHMveWZ1SjhEb2ZlMzU2b25WeWhPcXpnaG9FdjVpNmoweFgzTEdWTkI4dE5SVDY3SmJneExsOElZbk4vMHkrdFAxaDNXcWE1NnB3UUJrcmpaWWE3LS1VV2pDa0tJK0ZZNTZKb0sweFc4elV3PT0%3D--5b5306ddac994d5b1371b468fed17ffba7a5b6b6; path=/; HttpOnly; secure X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 121 X-Trace-Id: 00-733cf91b9681b1d0eb03c54c94beb96d-d531267b854c0d2a-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-10-10 18:28:29 UTC	7023	IN	Data Raw: 31 62 36 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 Data Ascii: 1b67<!DOCTYPE html> ...[if lt IE 7]><html class="no-js ie6" lang="en" dir="ltr" data-date-format="non_us"><![endif]--> ...[if IE 7]><html class="no-js ie7" lang="en" dir="ltr" data-date-format="non_us"><![endif]--> ...[if IE
2024-10-10 18:28:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	52.222.225.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:30 UTC	624	OUT	GET /assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b1f64384ab5de640.js HTTP/1.1 Host: assets7.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:31 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 48235 Connection: close Date: Thu, 10 Oct 2024 18:28:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 17 Apr 2024 10:28:15 GMT ETag: "d46f9fafe9c1f9b32e2451806d677d40" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 17 Apr 2025 16:28:14 GMT x-amz-version-id: eNek9AjcVdT7x71dAGKdp1H9t1D.mHw7 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 64f5a3ab7bfb476c633b87746aced0ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: f66C_bYlWOxwehs_1yZ4nfyo1XN6Mfn1enj_rdKYHbYa21FHeqEViw==
2024-10-10 18:28:31 UTC	8949	IN	Data Raw: 1f 8b 08 00 8b 9b 1f 66 02 03 ec 7d 6b 63 db 46 92 e0 e7 bb 5f 41 c1 8e 04 88 e0 4b b6 33 19 d0 10 c7 71 ec 8b 67 e3 38 17 3b 3b 97 a5 18 5e 8b 6c 4a 88 41 80 03 80 b6 14 92 f3 db af aa fa 81 c6 8b 94 9c c7 ce de ce ec 46 06 fb dd d5 d5 d5 f5 ea ea c5 3a 9a 65 41 1c b5 ae 78 f6 15 cb f8 cb 38 59 b2 cc e6 ce e6 03 4b 5a 99 ff f3 ff 5e f3 e4 d6 b6 ae b3 65 68 39 dd 39 cb 98 6d cd 75 41 cb 19 26 3c 5b 27 51 eb ab 67 ef 5e 4c 5f be f9 fe f5 b3 77 6f c7 d9 64 cc 27 bb 85 6a 7b 16 c6 29 67 97 21 7f 19 b2 f4 1a 1b b7 d2 2c 09 a2 2b cb f7 b3 db 15 8f 17 2d 7e 7c ac ba ea b2 90 27 59 37 8a b3 60 c6 3d f8 c7 b6 da bc 6d 39 96 33 ee 4f 46 87 4b 75 f9 72 95 dd da 4e f7 3a 98 73 db f1 54 5f 47 46 5f bc 3b bb 0e c2 79 c2 23 28 17 f2 e8 2a bb 3e ef ef 1b c2 03 68 bd cb Data Ascii: f}kcF_AK3qg8;;^lJAF:eAx8YKZ^eh99muA&<['Qg^L_wod'j{)g!,+-~\|'Y7`=m93OFKurN:sT_GF_;y#(*>h
2024-10-10 18:28:31 UTC	7851	IN	Data Raw: 5d 02 cc 43 67 39 1a 60 7e 9c e1 2d 85 59 86 f3 71 57 e8 6b 12 e3 9f 35 fc d9 a9 db e9 85 f7 02 6a a3 22 94 47 69 cd 05 5e 89 ce 29 58 85 d0 eb df a1 9c db 57 bd de ad d9 b6 8e a6 71 b7 e6 51 f2 40 eb 51 dd c5 24 db c2 ad 78 ae 29 15 a2 8d 25 97 2c 2b 00 4d 2a a7 5b 05 b3 43 ab 05 bb 9c fd cc 6e 84 76 56 50 f1 93 9a dd 9d ea bb 10 ce ce 2d 5f fe 07 69 0a 9a b0 37 80 85 5e 7e 9b a1 88 9c 6e ba 9e cd 78 5a 70 bd c0 d0 b8 74 9a c6 e2 12 44 fe 1a 16 be fa 80 01 eb 1d e1 68 04 38 27 1e cf 1a a6 68 47 95 da f7 26 34 17 87 7d f1 b1 a5 3c 96 f9 bd ba 22 d3 4f a9 1f 74 14 27 38 39 d2 ec b2 77 1c 6e 5a b9 f5 a5 0c bd 7a 6f 65 4e 89 51 4a f3 d1 0c 8b e5 0a 4a f8 fa 35 c5 e7 15 c4 00 03 90 b6 30 56 24 3e 23 81 01 90 cd e7 d4 e8 2d 36 8c 58 c8 29 ba 88 7e 6f ec 7c d0 Data Ascii: ]Cg9`~-YqWk5j"Gi^)XWqQ@Q$x)%,+M*[CnvVP-_i7^~nxZptDh8'hG&4}<"Ot'89wnZzoeNQJJ50V$>#-6X)~o\|
2024-10-10 18:28:31 UTC	8949	IN	Data Raw: 1b 53 50 2f b7 f4 e5 f3 18 2a 6e 9d f1 32 8a 75 71 91 9e ba f8 c7 72 ad 2b 7c 60 43 bb 72 62 f7 c8 08 49 17 29 e6 d6 3a d4 8a 62 bd 9f 6c db 46 9e 6a b2 bd 98 6f c7 47 0f 2e 1e 7e 76 7c 72 71 7a d1 be e8 5c f4 fc 8b d1 c5 4f d3 ff bb b9 d8 ee fe 31 d9 92 c5 ea 19 1a 75 be fa d3 cb 97 17 eb 97 7f 26 6b d1 cb af 9e e3 8f af 5e d2 8f 97 2f 5e 4e 9c b6 7d d1 fd 1d 5a 75 4e 9d ad 6d 5f dc 9c 9d 39 30 6a fc e8 6f 2f 6e fa 7f 76 4e e1 bb 3f 87 ff 98 e3 8c 8c f4 36 fc b2 c7 f0 39 e8 c0 9f 2f e0 bf 4b f8 6f 06 ff 71 6d 00 83 21 de 9c 0d 60 18 37 67 8f 20 f1 c9 25 0e e9 e6 c9 1c be ff c4 ef 33 bc ad 7d 71 91 77 f6 67 a3 33 6a 6b 71 9f b6 e0 7f a7 77 9e 21 01 c4 71 fe 52 58 c9 7b 0c fb 53 6a e5 75 3a db 8b ee 76 ba fd c7 3d 2a 9f 7e 4a 8f 8e 73 d1 05 c4 92 55 3f 61 Data Ascii: SP/n2uqr+\|`CrbI):blFjoG.~v\|rqz\O1u&k^/^N}ZuNm_90jo/nvN?69/Koqm!`7g %3}qwg3jkqw!qRX{Sju:v=~JsU?a
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: af ae c7 5b 73 3a 7e 9f 59 59 1f f5 e7 d2 cf 59 1f 4f 6b 7e bc 23 cf 1d 3f a6 6d 36 7a f7 bf 80 90 4d 24 82 74 5a 05 24 f6 ed 9b 74 46 72 da 13 35 22 1b dd 82 c5 57 d3 64 99 7e 8f 3b 76 26 5e 42 1e 1b 13 91 f0 44 24 44 0e 40 ed ec 82 e3 4e f6 a1 de 40 87 d0 58 51 6d 2e b1 cb 6f 2a 74 2c bd 97 04 60 d9 03 23 a7 f0 28 7c 74 4a d1 93 aa 93 24 22 f2 83 f4 9f 30 40 96 8d fd 58 38 0d 71 5f 3d fb bf 93 b3 67 7f 99 fc f8 f2 a7 bf 9c 7d 3f 79 75 fa 17 59 91 95 09 b1 1d b9 43 79 ae 06 1e a1 27 4f 10 d8 a9 b0 e2 5e d5 d9 bc b7 48 ca 77 74 a0 87 e9 44 3c a0 ef 89 14 84 e7 0a 40 c0 9c 54 bd 5f 8b 2c 27 b5 60 da bb 9a 27 d7 14 20 c5 50 f2 02 a1 4d e0 94 31 21 95 8c b7 2c 1f 1f 9e f8 9d fb 6c be d3 0f 78 fd 4e 9b 47 27 c7 58 29 d6 58 9e 57 fc 84 26 76 fa 06 c6 4e 8c e1 Data Ascii: [s:~YYYOk~#?m6zM$tZ$tFr5"Wd~;v&^BD$D@N@XQm.o*t,`#(\|tJ$"0@X8q_=g}?yuYCy'O^HwtD<@T_,'`' PM1!,lxNG'X)XW&vN
2024-10-10 18:28:31 UTC	6102	IN	Data Raw: 65 e9 7c 66 26 9f 25 97 2d 10 72 f2 7f cc f2 77 36 88 f4 d9 7c 0e 27 2f 02 25 73 40 dc 06 a1 ea 19 63 ff 4c 1c fd 84 8a 5b 4c 89 55 f2 39 a3 de 2e 29 e7 83 1c 26 20 f4 67 72 8b 75 1d f1 cd 2b 99 ce 1a fe ff a5 78 41 e9 fb 70 c4 ce 0e 0e 32 fd d6 4f 3c 23 42 98 cf 93 f9 fc 92 14 a3 a8 f9 00 b9 8b 38 dc 2d ac f0 0a ce 4f 20 73 41 97 ea db 4f 1a 17 a9 d4 08 78 97 82 74 d8 e2 26 08 6d c2 0b 9b d0 a7 30 e6 f8 5c 1c 0c 22 59 02 a1 5c 95 89 ee 88 2d e3 52 21 85 19 39 0a 0b 33 6a 34 72 5f 13 5d b4 fa 23 54 2d dd 12 cf ea fe 5e 9d 97 1e 35 f1 ec b8 20 7f 77 6c 63 51 ce 3b c6 1a 24 18 7a 29 f6 58 89 02 e2 55 9d 96 8b 38 c3 17 c4 e6 89 0d bd 95 d2 32 4e 1a 8a 97 25 6b 62 e2 5c c9 a1 f4 12 fa a3 a1 82 96 4b 42 08 6e 3f a7 d5 12 5a 4c d1 45 08 9e 67 f1 b0 4e 7a 0d 3b Data Ascii: e\|f&%-rw6\|'/%s@cL[LU9.)& gru+xAp2O<#B8-O sAOxt&m0\"Y\-R!93j4r_]#T-^5 wlcQ;$z)XU82N%kb\KBn?ZLEgNz;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	52.222.225.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:30 UTC	649	OUT	GET /assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css HTTP/1.1 Host: assets10.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:31 UTC	678	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8638 Connection: close Date: Thu, 10 Oct 2024 18:28:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 12 Dec 2022 04:52:12 GMT ETag: "50a2541263abb3b92ac0ce82c386e6f7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Tue, 12 Dec 2023 10:52:11 GMT x-amz-version-id: s85mL0Ta7XIwARM7zbr3aXUVgeVOWLB5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 34fdfb7c7c11559df7e622af2b62f5ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: rlWf3r4YBSfaLJbsCl_CufR8r8ypKxuUCZ0B36cdjvn6e3_GdiekYA==
2024-10-10 18:28:31 UTC	8638	IN	Data Raw: 1f 8b 08 00 f4 a4 96 63 02 03 ed 3d 69 af e3 46 72 df f3 2b 98 37 18 ec bc 19 51 cb 43 a4 2e d8 80 3d f6 64 03 24 1b 20 d8 0f 01 6c 67 41 91 ad f7 98 a1 44 2d 49 79 66 2c e8 bf a7 4f b2 8f 6a 92 3a 9e 8f 20 ab 1d 3f a9 8f ea ea 62 55 75 75 75 75 71 9b a3 22 ab 51 73 3a 24 59 96 ef 9f 56 de 7a 97 54 4f f9 1e 7f d9 94 55 86 aa 95 77 2e d0 13 da 67 a7 2c af 0f 45 f2 65 b5 29 ca f4 e3 fa 53 9e 35 cf 2b df f3 5e af f5 be ee a6 6c 9a 72 b7 0a fc e9 62 1e 1d 3e af b7 e5 be 71 eb fc 17 84 8b f0 cf 22 df 23 f7 19 e5 4f cf cd 6a 16 4e 69 93 b4 2c ca 6a f5 6a 99 24 7e 12 b7 43 f3 2f 02 20 ee ec d4 65 91 67 ce 2b 14 91 0f 47 cd a9 77 49 51 9c ba 61 fc 78 3a f3 e2 40 02 1c 6f e7 e9 62 7e 2e 92 0d 2a 26 f9 fe 70 6c 26 9b 23 06 ba 9f d4 a8 40 69 33 69 d0 e7 26 a9 50 22 Data Ascii: c=iFr+7QC.=d$ lgAD-Iyf,Oj: ?bUuuuuq"Qs:$YVzTOUw.g,Ee)S5+^lrb>q"#OjNi,jj$~C/ eg+GwIQax:@ob~.*&pl&#@i3i&P"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	18.239.81.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:30 UTC	636	OUT	GET /assets/cdn/common-284ce6b5922f3ee12731a4050ae7092884cde90a2c5a11a7a52e206e8d37d41b.css HTTP/1.1 Host: assets1.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:31 UTC	679	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31706 Connection: close Date: Thu, 10 Oct 2024 18:28:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 19 Dec 2023 13:25:08 GMT ETag: "32457f43d69ec6025966ccd300a60c75" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 18 Dec 2024 19:25:07 GMT x-amz-version-id: TBXlDim5aZwPDSYs0trn1zmekocycFxK Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8bb90d44758ce70476efdf577c8bd268.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: pI6DBGxkjW5KrgLGkuHepzrTPX9gHf_ZB1HrHcF8N3ye1NkRoKbTwQ==
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: 1f 8b 08 00 6a 91 81 65 02 03 ec 7d 89 72 ea 48 96 e8 af f0 aa e2 46 75 35 9b 90 10 08 3b 7a 62 d8 8d 8d b1 59 6d 98 d7 e1 10 92 00 19 81 30 12 7b f8 df 5f 66 6a cb 4c a5 00 fb 56 f5 9b 99 ae 4b b9 8c a5 cc 93 fb d9 f2 2c 33 7b 61 24 c6 a6 7a 48 a8 fa 36 61 ad e4 65 42 5e ad 0c cd 4e 98 e3 77 4d b1 13 fa 64 2d 2f b4 c4 2c 93 98 f1 89 99 90 98 65 13 33 31 31 cb 25 56 89 b1 61 2a f3 8f 8d 69 6b 89 d5 5a 4b c8 09 79 3c 5e 27 64 65 6d 2e 0f 8b 84 ac aa 6b cd b2 12 63 7d 9a 50 74 50 46 31 55 2d a1 6a 46 42 9d 2c 13 da 22 a1 2f a6 09 7d 69 25 e6 63 35 f1 91 b0 12 96 bc 58 25 ac 85 6c 18 09 cb 5e eb 73 0d fe 32 97 d3 84 b5 19 83 9f 55 c2 b6 13 5b 79 9d 18 27 36 09 3d a1 68 4b 5b 5b 27 54 00 ce 4e a8 6a c2 34 12 1b 23 61 e8 89 89 ae 19 aa 05 06 30 31 d7 8b 84 21 Data Ascii: je}rHFu5;zbYm0{_fjLVK,3{a$zH6aeB^NwMd-/,e311%Va*ikZKy<^'dem.kc}PtPF1U-jFB,"/}i%c5X%l^s2U[y'6=hK[['TNj4#a01!
2024-10-10 18:28:31 UTC	916	IN	Data Raw: a6 57 28 97 97 8d ac 61 b7 e5 bb d7 bd 0a f0 da e4 3d 9d ad 3e 65 b3 f1 e3 60 cc b7 d2 a3 d6 43 7a 23 dc e7 eb d5 0f 7e 78 2f 3c 3d 3c d4 5e 8a 52 ed 30 49 37 25 48 97 a5 ee 1a b0 e4 07 68 e0 00 fe 75 fb 83 a7 ce 83 58 1e 36 1a 17 75 49 c1 3b df 04 93 ff 01 79 41 fc 15 12 d0 60 90 92 18 fc 1f 21 38 a1 28 27 84 d8 f5 99 02 52 21 62 7d 1c db f1 13 ab 0d e7 15 60 59 7e 7c 3a 12 96 17 c1 89 87 1f 4c 34 75 fc 40 80 58 3c d3 8c 15 ca 2c 8e e7 09 11 02 bb 75 c7 2b 8c 0e c4 8d c1 11 11 1c 7d b9 da d8 ff 65 43 a1 0b 02 fb 67 02 7b b0 92 2d 6b 07 b8 ad 7f 26 9c d0 14 ce bb 14 6a d4 8f b7 c3 b9 be c6 64 c8 29 a7 02 1e 6a 05 8f 14 be 90 f7 41 d6 cd 1f 9f 29 e4 17 82 3d 70 fa e0 bb 5e 26 60 8b f2 5a c3 9c 46 dd 6e 82 67 2a cc 93 ee f5 10 7b e0 d7 f1 1f 31 a4 d6 89 08 Data Ascii: W(a=>e`Cz#~x/<=<^R0I7%HhuX6uI;yA`!8('R!b}`Y~\|:L4u@X<,u+}eCg{-k&jd)jA)=p^&`ZFng*{1
2024-10-10 18:28:31 UTC	14406	IN	Data Raw: e6 67 35 8a 90 a4 a6 26 17 fa 72 63 25 51 da 9a 6f 43 05 3c 99 aa ba a3 f7 8f 63 08 15 e3 a9 0c 59 cc bd e0 86 2b a3 5d 53 c9 5b 2b 5c 93 29 79 3a 4c 48 a2 73 e8 d6 cc e9 05 44 9a 51 a8 0a 2f 13 73 2f a4 b0 14 82 e8 42 87 2e 91 82 78 cd 0c 15 86 19 41 82 39 0b a4 06 24 33 c4 78 3a 5e 11 f2 a2 c5 47 23 06 7f 7b 59 48 89 b6 1d 2a 82 da 0e 2f 8e 4b 88 dc 44 93 88 56 e0 1c 0b e7 2e 1c c3 b3 37 4c 0b ab 59 f8 61 04 ec a8 49 f0 e3 b7 10 83 34 06 ed 21 c8 c8 10 ed f1 3f 9c a5 e0 7f 04 13 cd ac f5 95 63 ed 13 07 50 5a 5d 26 61 df 56 49 87 0b 40 7e e0 63 1b a6 54 b1 ff 86 65 6e fa 9d 3c ca dc 55 40 3c 86 04 e0 ff cb e5 43 c9 a8 82 2a 01 d1 42 7b 13 cc 89 f3 cb c7 03 b7 a1 bb cf 42 ee 07 5e 3f 36 13 08 c6 00 7f e5 6c 45 8c 8f 7a 83 c9 62 56 41 b8 51 cf 13 5c 64 55 Data Ascii: g5&rc%QoC<cY+]S[+\)y:LHsDQ/s/B.xA9$3x:^G#{YH/KDV.7LYaI4!?cPZ]&aVI@~cTen<U@<CB{B^?6lEzbVAQ\dU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	52.222.225.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:30 UTC	625	OUT	GET /assets/cdn/frameworks-f591442b919f150f5c0b50e1012a34829e8a6ae061cdc17eb1c2cda99e8baf68.js HTTP/1.1 Host: assets2.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:31 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 537164 Connection: close Date: Thu, 10 Oct 2024 18:28:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Mar 2024 14:43:26 GMT ETag: "c899e6357a193e5f5aaba4b64d1037f4" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Fri, 21 Mar 2025 20:43:25 GMT x-amz-version-id: okbPQvX7JgjooqoejvY6Wrg2YlBH81DQ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ce765e91525a836efb6bc0a409334a5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: SlRnmZNcJF9xSoqrgMT60I3j3saLs8Spxtk5IOSl4pIKrMGA-CLBaA==
2024-10-10 18:28:31 UTC	15345	IN	Data Raw: 1f 8b 08 00 d5 3e fc 65 02 03 ec bd 79 9f db 46 92 26 fc ff 7e 8a 22 ec a1 00 31 c9 2a 4a b6 67 1a 14 8a ab b3 a5 6e 5d 2d c9 e3 ee 61 d1 b5 28 32 ab 08 89 04 68 00 94 54 2e b2 3f fb 1b 4f e4 81 04 08 ca 72 cf cc ee ce be e3 9f 55 04 12 79 67 64 64 44 64 1c 97 9b 74 56 26 59 7a f4 28 2e e3 27 f1 ac cc f2 6b 5f 06 37 e5 22 29 06 1f e4 75 24 b7 5b 2f 99 7b 82 13 0a fa 2c a3 9b 9d 7a 9b 6d f2 5c a6 25 4a 46 93 a9 4e 8b 67 0b 39 7f 96 ce e5 67 9b af 90 65 74 a9 db f1 a5 28 75 ed 5c d9 44 4e a3 52 e7 bb aa e5 0b 6e 72 59 6e f2 f4 e8 60 bd ba fd 57 17 ef 23 a9 52 ce 37 eb 79 5c 4a f4 c8 af b5 11 f0 f7 dd 5e ae 5a 7b 7b 83 92 bb 9d f9 7e 34 cb a5 2e f3 16 75 22 ff 65 96 fb 1f e3 fc a8 3c 4a d2 23 19 c8 c1 22 2e 5e 7d 4a 5f e7 d9 5a e6 e5 b5 5f 06 dd ae 2d 80 59 Data Ascii: >eyF&~"1*Jgn]-a(2hT.?OrUygddDdtV&Yz(.'k_7")u$[/{,zm\%JFNg9get(u\DNRnrYn`W#R7y\J^Z{{~4.u"e<J#".^}J_Z_-Y
2024-10-10 18:28:31 UTC	1434	IN	Data Raw: e7 08 83 e1 a7 3d 2e 11 84 ad 1f 4f 4f 87 27 db ef bf bf f3 87 1f c4 f0 e4 ce dd 6e ba fd fe 87 bb 77 a0 f0 f4 a9 66 97 fb 08 2a 71 10 f2 99 73 f8 8f d1 bf a9 33 fa 49 cd 2d 62 fd ed 8f 93 27 fb ce 7c a6 96 2e d6 42 c2 cf 44 73 ff 29 ba e1 7a c3 3f ea 5c e3 fa a1 f5 67 dd ac 14 ba d9 32 70 a5 12 7b 62 c1 ea ae 72 04 09 68 75 e1 18 8c ec 5d 63 42 e7 d9 6e f7 01 de 9f d4 8d 12 b4 13 1f d2 6b 52 fc f5 c5 f3 a8 55 2d 64 5f e3 56 06 4d c7 29 95 6d 91 07 6f 3a 75 29 3a 74 2f c5 23 f6 38 65 5d a7 ec 37 05 7a 18 1a 0b 7b 8d 85 4f dc a5 7f df ed fe 21 72 fd e6 10 b9 d8 ec cd d8 7f 1f a5 e2 4d f4 be f9 41 3c 8f 3a 0f fd f7 70 ca 81 8f 95 ba 28 3b 61 a4 03 5c ab 19 25 fb 3e f9 f7 93 10 4d 42 79 c8 ff 24 61 97 11 26 10 be 1a ff f9 a8 d0 79 85 3b fd 2a 3b 51 f4 1f 58 Data Ascii: =.OO'nwfqs3I-b'\|.BDs)z?\g2p{brhu]cBnkRU-d_VM)mo:u):t/#8e]7z{O!rMA<:p(;a\%>MBy$a&y;;QX
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: 96 a9 8c 2e 78 27 13 1a f9 00 bf b1 04 32 8f 36 b8 64 26 c2 aa 10 8f 23 8d 18 df b2 bf 7f 36 a9 56 17 92 20 47 f0 c1 ff 36 10 af ac 5a 8a d4 bc 07 1f 15 93 62 aa c2 72 a9 03 bc d0 2e c3 94 ee 98 b1 89 f3 a1 37 26 86 f6 06 e9 b1 ba af 95 3b f1 59 b1 3d 08 d5 d1 da 7f cf b3 e8 ce da 5d b3 2b 05 e3 57 9f 16 e8 0f ea 67 c8 af da b1 58 d3 92 c0 f5 d2 5c 79 eb 76 12 b9 d7 b8 21 75 e2 8f 48 b6 d9 76 f4 cc 82 a4 17 21 e8 80 d5 86 bd ab 9a fe ce d5 76 55 3d 65 bf e5 35 8d 1c a9 45 67 5c 47 e9 44 61 12 9f ac eb f4 2c 2f a2 1b 47 1b 31 fc fe 44 3b 10 7a 5d c8 cd 3c 0b 53 c1 58 05 d6 b2 15 98 c3 d4 0d 9c 1d 9b bc e9 fb e7 f0 c6 3b f5 c2 9b 79 92 87 ae 7a 93 b6 d2 84 91 14 61 a1 fd ef 94 dc b3 c9 b9 fc 98 64 9b 42 0f be 56 f6 ef 87 32 ed 76 82 92 94 03 85 f0 86 c5 f8 Data Ascii: .x'26d&#6V G6Zbr.7&;Y=]+WgX\yv!uHv!vU=e5Eg\GDa,/G1D;z]<SX;yzadBV2v
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: bd 27 7e e7 46 e6 75 23 57 ab cc 6b fd 4b e5 cf 36 3a c0 67 87 b9 02 b1 fc 20 73 25 d6 09 f7 33 57 2f fd 8a 1c 90 09 87 24 43 24 cd 87 6f 40 c0 af b3 16 21 9f 9b 38 41 a2 ec 57 a9 8a 7b 6f 61 bc dd 65 c3 7a 5f f1 ef b1 61 a3 dd 4c 95 f3 11 ac fe 14 ae ca b1 44 9a 7b 1c d3 c7 33 44 12 e8 f5 23 99 1f 64 96 98 17 9a b3 c9 ce c5 59 e2 23 e5 66 ca cf 26 f6 56 74 6e a7 6c 11 fa 75 d9 e2 72 e6 38 4a 5e 6a eb 44 8b b5 b8 d9 fc ab 9f c8 00 7a 75 8e 2b f3 83 13 b0 34 6a 7c e0 a2 51 d5 41 12 00 de e2 4b fa 15 8b 26 94 52 ac 46 54 d9 4a fb da 3d 0b e2 38 13 8d 5e 1c 34 f5 62 68 83 bb e3 7e cf ce bb f4 f7 f5 a7 8e 8d b6 51 08 ca 6e 76 2c 6a b4 10 b8 63 44 73 17 bd 42 8f 21 87 f8 f2 15 04 ad 8f 44 e3 4a df 5e 46 61 5e fb 46 4b 03 ad fd 47 cd 74 2e ca d4 ba 81 ba 30 cf Data Ascii: '~Fu#WkK6:g s%3W/$C$o@!8AW{oaez_aLD{3D#dY#f&Vtnlur8J^jDzu+4j\|QAK&RFTJ=8^4bh~Qnv,jcDsB!DJ^Fa^FKGt.0
2024-10-10 18:28:31 UTC	481	IN	Data Raw: bd fd d3 87 63 89 1b 84 a7 f1 c3 27 47 57 9f a8 03 b0 d7 23 d5 7d 86 38 59 eb 5a 76 88 11 3e 46 d1 88 aa 5c eb 6a b5 9c 20 a4 53 7f ac a6 78 aa 91 c4 6b 52 b0 f2 1e c8 4d 8a 0b 8e 17 c5 6e a2 06 53 6d eb 6a d5 1c f0 b0 04 66 b6 06 b2 42 35 bb 24 7e 4a 4e cb de 6b 5a 5e e7 15 2c 01 9c d7 5c 69 d8 ef bc 2c 4b 90 fe d2 f3 f5 6e 10 3a 44 2f 1c 3c 68 5c 3b 62 45 0e 84 61 14 95 16 aa e3 f7 06 d7 a2 55 ba 14 be 97 76 5e c9 a7 c3 dd a4 8b da b5 a3 7e 89 09 8d 77 9a 5b c1 7a 38 50 6b 36 52 c1 87 3a 9d 56 5f 2a 58 50 72 52 e0 7f 5b 09 f2 c8 2f 9f 79 17 fa 8e 95 d3 ac c0 cd 48 e1 05 49 fa c8 38 34 36 04 81 41 4a 82 51 a7 a0 aa 19 9c 60 71 bc 1e 71 08 ad d1 b2 ca 25 c0 71 fe ae 68 da 11 9d ee 2a ea 8a 7c e0 e3 00 96 85 1c 21 f5 be a8 2b 59 59 d0 f1 9f 7f 45 74 7b 05 Data Ascii: c'GW#}8YZv>F\j SxkRMnSmjfB5$~JNkZ^,\i,Kn:D/<h\;bEaUv^~w[z8Pk6R:V_XPrR[/yHI846AJQ`qq%qh\|!+YYEt{
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: e0 48 60 69 61 cf c9 9f 4f 9b f1 86 fe 7b 80 f3 92 41 4b d3 5c 5f 1e df 94 6a b8 80 12 27 56 41 03 d3 c0 5e d2 92 0e f8 99 20 3e 50 f8 62 62 4f d1 9c e1 f0 fd dd 19 4c 39 b2 cb bc ab c5 37 31 e8 68 07 bd 92 2c c4 5e 29 84 ef fd 7d 71 3f 48 1d 23 17 9d 4b e9 f3 f3 de fd 0c 51 bb 7c 79 76 b3 a6 11 74 e2 fb 6a ef 3d b9 7f 4d 07 cd 10 68 f5 13 31 2a f0 4f 99 de 69 7f f5 e4 e8 e7 59 76 f0 af 67 07 ff 98 ab bf c7 07 7f 3c 9b 3f 0a a7 c9 e9 0c ff 2c 1f 6d dc 17 e3 e8 74 1e 3d 7a 70 84 bb e1 e4 c8 7b b3 09 a7 e9 e9 8c 5e d3 60 b3 15 d3 d1 cf 94 4f e2 99 d3 4c 2c 69 16 d8 02 75 69 db 94 82 0f 8e b6 13 09 97 87 18 a8 69 97 5e 6a 2b 42 31 fc ca b7 c2 ad a2 85 33 96 41 bd f8 62 26 bb 89 46 52 cc f2 39 cc 31 61 45 02 60 4a fa 3b 1e 6f 95 02 59 c6 50 31 2d 3d e0 52 55 Data Ascii: H`iaO{AK\_j'VA^ >PbbOL971h,^)}q?H#KQ\|yvtj=Mh1*OiYvg<?,mt=zp{^`OL,iuii^j+B13Ab&FR91aE`J;oYP1-=RU
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: f3 84 5a 89 b7 9c fa 5f 44 b1 7a 05 7c 89 2f 7d 7b 84 ef 5a ca 0a 00 3c f8 2d 3b 06 36 9d b8 e9 f9 99 a6 80 4e 95 b1 fa 2e f9 0e ff e1 05 cf 02 0c 72 7d 76 96 2c 88 23 46 f2 79 42 db e9 43 cc b6 0f c4 df 11 21 a0 ad 09 9a ca 10 16 f8 2b f9 b0 b3 f8 cd 89 7e 73 d2 79 f3 4c bf 79 66 de 30 2c 86 2d 1b 54 96 21 8a 23 a1 b8 68 35 31 84 5f 12 93 a8 e7 57 4a 64 33 86 e8 d9 b7 e7 fa f9 df 73 ec fa eb 94 43 94 52 43 f1 e3 2d ed 9d 2a 02 92 b8 29 ca 56 e4 73 74 64 fa c0 1b e8 ce 0c 88 70 0e 74 87 06 de c1 0a 0f 27 ce 8b 13 fd 02 bf 9f 39 e9 cf 74 fa 5d 42 b2 1c 04 0f 22 db c7 bf fa c5 f6 3c 30 0e c6 b5 c7 43 30 fd 83 81 45 f8 d3 2a 8f f7 00 23 4c 9f 85 b0 b1 fd 22 24 34 ce d8 6d 25 2e 89 eb 18 f8 9f 1e 17 a9 02 91 12 30 85 43 b4 e6 db 9f d8 da 5b db cb a5 62 88 80 Data Ascii: Z_Dz\|/}{Z<-;6N.r}v,#FyBC!+~syLyf0,-T!#h51_WJd3sCRC-)Vstdpt'9t]B"<0C0E#L"$4m%.0C[b
2024-10-10 18:28:31 UTC	1024	IN	Data Raw: 00 19 2e ed b7 d4 0e 6f 78 77 82 0a 6d 56 ab e7 98 eb 61 7f 03 f1 d1 30 42 3a da bc c9 e4 f6 20 52 00 75 1f 39 da 1a 43 e5 be ab c1 f6 a5 99 21 cd f0 6e d7 69 6e 8f c5 6b 58 25 bf 9d 39 ad 33 a0 14 0b 9d 0a a1 07 01 f3 b2 2c 5d 37 ce 61 59 51 38 cf 6e 77 9e 22 0d bd e3 8b 34 93 c8 d9 1e 80 66 06 5d 88 f3 b2 b9 c4 57 70 ab 2e 2c 80 ee 74 56 6c 76 d5 ee 4d 66 e2 73 5b d6 89 56 85 ee 8c c9 bb 52 dd c6 1a c2 13 16 4e 98 30 b6 96 90 ef 2c 25 63 5c 6b b3 2c 38 97 38 76 37 79 34 48 b2 6a 84 6b 06 6e d5 11 28 49 c0 50 5a dc 60 a8 70 6b da 93 de a1 86 c8 ad 8f e8 00 ba fb 3d 6a 50 d9 35 1d c8 ae 4f 38 83 fa 26 0d e5 58 ec 29 28 22 58 38 dc 0b d1 a2 91 de 40 1a c3 a5 68 b5 4d ce 70 e6 70 b3 48 23 20 da 45 65 f8 a5 8b 89 6a ba 9f 56 2b 5a d9 be 13 c1 79 0a 21 48 77 Data Ascii: .oxwmVa0B: Ru9C!ninkX%93,]7aYQ8nw"4f]Wp.,tVlvMfs[VRN0,%c\k,88v7y4Hjkn(IPZ`pk=jP5O8&X)("X8@hMppH# EejV+Zy!Hw
2024-10-10 18:28:31 UTC	14389	IN	Data Raw: 2c f5 65 43 1e 2e f3 12 7e 8c 82 69 b2 03 ed b8 6a 44 0f 65 3b be f8 c8 76 88 32 be e4 76 7c 19 6b 07 e0 f3 83 5d 17 e2 57 d1 4f 34 3f f5 34 99 23 ed cf 9c a6 f3 b1 9f 20 3b 57 d9 b3 cf d5 cf c2 4f 28 96 76 33 eb 22 6d c6 31 db ed ba 81 2e cd ba 62 30 b7 28 5b 57 df 8d 8c df 82 fa 96 4f 93 40 17 ff 62 75 71 e9 77 f1 2f aa 8b 13 dd c5 49 a0 8b 7f 11 fb b8 99 55 b1 b9 c5 b5 25 28 b6 a1 b9 9f 55 c5 70 7e 51 bc 6e 41 35 32 7e 67 79 f2 01 8e be cd 19 98 fd e1 22 0a 74 25 4f de 5b 89 e6 65 60 4a a5 04 61 1e 1e ee c7 52 fe a3 8f b9 2b 56 f1 bb 82 0e b1 65 64 98 1e cf df 8c 3e ea de 58 0d dc 1b c8 a1 82 62 22 c2 90 0e 48 d2 5d 6b 12 45 18 87 a4 bf d4 5a d4 ad 10 2f fc 13 94 5b 2d e5 17 ab b2 d4 2a b0 d4 e8 dd 81 fc 0a c8 c5 36 8f f3 70 cf f3 a0 d2 df b2 90 fc a0 Data Ascii: ,eC.~ijDe;v2v\|k]WO4?4# ;WO(v3"m1.b0([WO@buqw/IU%(Up~QnA52~gy"t%O[e`JaR+Ved>Xb"H]kEZ/[-*6p
2024-10-10 18:28:31 UTC	16384	IN	Data Raw: 5f cc 83 a8 de 7c c3 ae 43 e6 2b 60 88 52 70 ba ca b4 75 d4 77 73 47 15 e9 4f cd 19 ee 86 29 c8 b4 10 6f 57 d4 75 e5 06 18 51 73 30 a6 c6 e1 5e 38 91 7b e2 24 19 f5 b2 ef 0a 1b 05 82 04 1b 43 22 c7 42 36 54 d9 3a 23 61 1a 2c db f1 22 d0 e5 ab 66 f1 d8 d3 f6 55 97 08 cd 40 a4 f1 d8 53 0a e3 20 71 fb bd f1 b1 8a 71 f9 04 af a4 47 75 25 8d c4 0b 40 ed fd 74 30 6a c0 71 7b 80 72 3d d5 3b c1 19 95 78 77 28 c5 49 a8 0b 34 ca e8 ed 21 58 b2 7a 2c 23 8b c0 0b 91 b2 85 14 cb a5 fe ec 25 97 0e 87 46 7a b4 2f 08 34 d6 7a 55 89 73 76 5c bf 17 8b 71 81 71 11 bc 6f 46 0c 3a ef 1b 10 95 a2 cc ce f9 26 8e 05 09 9f 2c 5f ff a9 6d fe b1 ad bf 5b 28 d8 6c 73 55 00 24 91 bd af 69 83 79 c3 68 ce 82 9e 1f 6c 84 98 4b a3 e3 64 6a 64 8f b2 91 ca 7b 19 1d 4c 26 77 39 30 49 9e 1c Data Ascii: _\|C+`RpuwsGO)oWuQs0^8{$C"B6T:#a,"fU@S qqGu%@t0jq{r=;xw(I4!Xz,#%Fz/4zUsv\qqoF:&,_m[(lsU$iyhlKdjd{L&w90I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	52.222.225.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:30 UTC	623	OUT	GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1 Host: assets8.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:31 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 36298 Connection: close Date: Thu, 10 Oct 2024 18:28:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 12 Jul 2023 10:12:03 GMT ETag: "66b03ba3bb716fc88b1f55ba0e79c3b6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 11 Jul 2024 16:12:02 GMT x-amz-version-id: FX0J3GnHPC2RzwB9koXY8pR7p66GZ.1U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 944dc31277adc1021b0776fe818f07f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 9TxIyDHi6MgPfp4xlDvqozPeqpD31eQ7TnevuA1ocUI2UNmcxbCwUw==
2024-10-10 18:28:31 UTC	15698	IN	Data Raw: 1f 8b 08 00 6e 59 ae 64 02 03 e4 bd 6b 7b db 46 92 28 fc f9 9c 5f 41 22 5e 19 10 41 8a b4 93 d9 19 d0 10 57 b6 e5 89 df 89 2f 6b 2b 33 c9 52 8c 1f 98 6c 49 18 53 00 17 00 6d 6b 48 ee 6f 7f ab aa ef 40 83 92 92 cc 9e 3d cf c9 33 63 11 8d 46 5f aa ab ab ab aa eb 72 b1 ce e6 55 9a 67 9d 07 27 3e 0b 36 e9 85 df 65 41 c1 aa 75 91 4d 67 63 78 64 83 2a 3f 29 8a e4 46 94 76 54 81 1f 8c 2f f2 c2 ff 9c 14 9d 2a 66 83 25 cb 2e ab ab 30 8d 33 f6 a5 c3 2b 54 c1 b8 ea f7 c7 41 3a ad 66 31 83 7f c6 a2 8d 74 77 71 5b bf 7e f7 cd c7 bf b3 79 35 48 cb 17 a2 2e 54 dc 6e bd 69 4e e5 9d d7 f9 82 fd 90 96 d5 cc eb c6 2c 38 38 f8 a7 0f f4 0b 0e 54 94 ab b1 bd af 8a 34 bb 84 37 13 9f 41 db 25 3c ae fc 20 64 13 f8 bd 5a a6 95 7f 74 5e f6 8e 82 68 3a c3 ff 1b ad 7d 6f b4 86 03 f9 Data Ascii: nYdk{F(_A"^AW/k+3RlISmkHo@=3cF_rUg'>6eAuMgcxd?)FvT/f%.03+TA:f1twq[~y5H.TniN,88T47A%< dZt^h:}o
2024-10-10 18:28:31 UTC	2028	IN	Data Raw: 65 19 c5 18 bc 5a e5 d6 f0 ba 5e 37 2e b5 9f 4e c6 01 58 6a b7 7a 57 04 f7 fa 4e 68 8c 44 98 15 91 76 cf 11 b9 be 0a 50 e5 aa fa da e9 be ac 73 ef 77 5b 03 89 0f 56 94 fc ca 82 7f 73 94 8d ee c7 f5 34 19 28 e6 5a b9 4a 34 42 9b c9 77 43 77 b6 01 77 fb b5 b4 03 77 ee c3 75 0e 85 14 2c 81 07 2e 31 5d 27 44 3c a2 99 29 e7 4b 50 92 19 0b 6d d4 8c 47 ec 33 b8 1e 0c 0a a2 16 a2 20 5d 73 01 f0 16 1a e6 44 c3 bb 70 e3 7c 6a 42 9c 54 04 88 20 b0 5e 14 c8 0d 15 a8 3a 98 c0 ae b5 9f c2 7d 80 c6 78 35 23 74 e8 85 d1 8f f2 95 68 19 52 e3 ec 0c 8d 10 13 0f 78 ac 16 27 94 ba a5 ce ab 42 b9 7b 0f 0e 0c b7 2f f9 ae 9c 99 10 45 80 72 66 71 3f 2c a1 5e 69 d8 b9 c7 71 a1 db db c9 0c 5e 77 5f 1a c3 57 c6 8c 64 8d 2b 15 b8 1a 56 7c eb ad cd de 39 b5 46 19 38 26 c1 c8 ba d5 0c Data Ascii: eZ^7.NXjzWNhDvPsw[Vs4(ZJ4BwCwwwu,.1]'D<)KPmG3 ]sDp\|jBT ^:}x5#thRx'B{/Erfq?,^iq^w_Wd+V\|9F8&
2024-10-10 18:28:31 UTC	8568	IN	Data Raw: 7c 44 6c f9 d7 3f 78 11 bb 50 5e 21 2d a2 6c db 22 c6 1b 02 58 0d 3d 44 ea 00 0e 86 1a 7d e5 d9 04 48 10 fe 98 7f 95 79 04 92 45 9a 7b d1 2d 18 33 a0 be 14 c7 4f 89 b9 6b d1 eb 5b 3f 95 27 00 8f 55 82 e6 27 46 53 6e 6e cd c5 19 63 b2 4e 21 c4 c3 2f 9d b3 9b 92 fb fa 56 dc 61 0c 97 2c 3a bd 5f fb bc 55 d1 20 c7 fd 2a 70 90 30 11 97 d0 d9 8c e9 6f 35 15 e7 60 5f 46 40 c7 55 99 88 c2 37 19 26 2b e6 bf 5f 25 d9 8d 67 5d 3c 0a 86 bf c6 4d 57 81 10 76 99 66 b4 12 92 77 c9 14 16 83 a2 72 c7 a9 84 b2 bc a1 b9 03 2f e1 34 10 c4 5d ae 4d cd 62 95 86 93 7b 21 a6 62 bb 10 92 4b 55 a2 2e d3 c9 53 33 05 0f 18 bf 83 db 61 ea 23 62 20 14 3f 0f 3c c7 a4 31 1e 3d de 6a 26 03 6b 6b 80 34 5b 0f 53 3d 71 9e e7 d6 4c 4c a1 cd 95 86 21 8a cd e3 54 d8 e9 a8 80 8b b2 37 90 0c 4b Data Ascii: \|Dl?xP^!-l"X=D}HyE{-3Ok[?'U'FSnncN!/Va,:_U *p0o5`_F@U7&+_%g]<MWvfwr/4]Mb{!bKU.S3a#b ?<1=j&kk4[S=qLL!T7K
2024-10-10 18:28:31 UTC	10004	IN	Data Raw: 75 50 a7 e4 e6 14 fc 2f 95 ac b8 8a 11 be 4b 3e 31 78 ba b8 e8 94 74 3d dd 29 a5 4d 6b 67 c1 6d 1d 3d 47 b2 3b 7b 15 d1 bb d9 f4 ab 31 82 e8 21 9f 21 63 62 b2 56 10 32 0b 84 33 6a 23 44 26 8a 26 5b 57 6c 76 ea ce 07 1d 3b 5c 74 a7 1e 7f ba b3 27 20 75 47 6d 9d bb cd 53 6c 16 f4 53 72 06 79 b7 bf 50 99 d3 d2 f2 47 18 ec 45 8a aa 5f 5e 25 e0 da 2a 6f 51 24 97 08 e9 c1 df 55 c4 e4 b2 93 ca ec 37 1d 9e 54 6b 90 cc d7 cb fc ff ef ee 59 9b db 36 92 fc be bf 42 c2 ba 14 20 84 68 d2 de ec d6 82 86 59 b2 2d 9f 75 d1 c6 3e 4b be 24 2b 33 2a 58 1c 49 88 29 50 0b 40 4e 14 89 ff fd a6 7b 7a de 03 90 76 72 5b 57 97 0f 8e 38 98 f7 f4 f4 f4 bb 87 37 cd 57 5b 32 5c 0e af be 28 3f d4 45 7d 1b 21 f4 82 65 ea 35 84 e7 e4 97 0a fa 6b 32 4e 57 77 05 43 c4 0a b9 fe b3 2f 10 a2 Data Ascii: uP/K>1xt=)Mkgm=G;{1!!cbV23j#D&&[Wlv;\t' uGmSlSryPGE_^%oQ$U7TkY6B hY-u>K$+3XI)P@N{zvr[W87W[2\(?E}!e5k2NWwC/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	3.5.21.134	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:31 UTC	972	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZVAlJh7qH3kuFxlIk0Jf-xB-Clir31is5w.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T132508Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=674e0ee39d0c749457254fc6f216460c8583d272046a8cd6eab3a0def0dd0998 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:32 UTC	523	IN	HTTP/1.1 200 OK x-amz-id-2: sD9g+7J6HIweAV2r/ji2w1/8keR0LLYHyyMGuOAuTNHg7UZiF+gTwk66ZWY/bTqNy6gB5XBUBSllOALPqI0t6DvMgrBC0/Hu x-amz-request-id: 8YYM9M303GW3PMFH Date: Thu, 10 Oct 2024 18:28:33 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 13 Mar 2024 14:59:15 GMT ETag: "24e57a81046c39dd5b37f0201d32a914" x-amz-server-side-encryption: AES256 x-amz-version-id: smaKCCkSHqIkDEr7WNe_JDCydUsnQP_1 Accept-Ranges: bytes Content-Type: image/png Content-Length: 3966 Server: AmazonS3 Connection: close
2024-10-10 18:28:32 UTC	3966	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 03 0d 0e 3b 0e 52 9d 7e 77 00 00 0e 82 49 44 41 54 68 de ed 99 7b 70 5c d5 7d 80 7f e7 71 9f 7b 57 bb 7b 57 bb 92 56 0f 24 59 46 08 cb 0f 2c 21 5c 61 f3 8a 07 04 2e a6 10 6c d7 d3 c6 21 c1 8c 61 02 25 69 4b 66 f0 4c 93 32 34 84 96 69 c2 a3 ad 69 1a c0 13 6a 88 31 01 4a 5b 8f 2b 03 c5 e6 21 c5 03 c8 d8 d8 c2 96 2d 55 5a eb b1 6b ed 43 bb 77 f7 be cf e9 1f d8 8c 83 95 7a c0 c4 a4 33 fe 66 f6 8f bd 7b Data Ascii: PNGIHDR22?gAMAa cHRMz&u0`:pQ<bKGDtIME;R~wIDATh{p\}q{W{WV$YF,!\a.l!a%iKfL24iij1J[+!-UZkCwz3f{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49735	54.85.43.134	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	984	OUT	GET /assets/strftime-min.js?1728540009 HTTP/1.1 Host: darwynnfulfillment.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _helpkit_session=N05ZZmNZdEluWUtWcmFpYTI5UmNsSStoQkVqM0MwZTcrQlVXcGQ3a3F1b0VML0w2bnJWR0ZHQnJScjJsMVJMYjVDSmpLNWpkVlo2eTdVNmcxeWFqMjBPOFgyTTVTNlRYZW9FaUQvdGdQcnFDUHMveWZ1SjhEb2ZlMzU2b25WeWhPcXpnaG9FdjVpNmoweFgzTEdWTkI4dE5SVDY3SmJneExsOElZbk4vMHkrdFAxaDNXcWE1NnB3UUJrcmpaWWE3LS1VV2pDa0tJK0ZZNTZKb0sweFc4elV3PT0%3D--5b5306ddac994d5b1371b468fed17ffba7a5b6b6
2024-10-10 18:28:32 UTC	6192	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:28:32 GMT Content-Type: application/javascript Content-Length: 3975 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 605deb1a-3e55-4da5-b7d9-38fea89cd7be Etag: "6811a768981410d46b9e7952a7b82577456785ac3956f82c032a1beece396e9b" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] Set-Cookie: _helpkit_session=UTdsWmN1bDZLV0s0SWU3NFZVMnNOQjc5RlVqSWg4MmxHSm55MEF4OW5DTU56aUF2aTNCUWV0OWE2OEQrcDdaM0FUcnR3VzdINTBQYlQwcUZHdVFUZVNJRUNsaWEyTWNjSll3UTZhSUVUMDlJMVFtK2J0RklKNnRJaSt0THlGcHA5NVBvMTN4Sk5DS3Bna0pXRUlLeURDUHpjTkFYaXFkM3d0bU9FY2pmMzRXUUVwcmlrcUpGbEpBUmQ0VFJJbW9aLS1SWW8vNWZGTE1aOFFCaU1OQjRXVjZ3PT0%3D--73a01056bb3367c16f7028a1b436995e250ce9a7; path=/; HttpOnly; secure X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 28 X-Trace-Id: 00-3c05498f5f247ca16455fc141fd29424-121d23441dcd3fb1-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-10-10 18:28:32 UTC	3975	IN	Data Raw: 44 61 74 65 2e 65 78 74 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 2e 78 50 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 31 30 29 3b 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3c 61 26 26 61 3e 31 3b 61 2f 3d 31 30 29 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2b 65 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 63 61 6c 65 3d 22 65 6e 2d 47 42 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,a){for("undefined"==typeof a&&(a=10);parseInt(e,10)<a&&a>1;a/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsBy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	52.222.225.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	433	OUT	GET /assets/cdn/workspace-96a5fb99fb057eca9b52625363cee919740c8fc4623b7660b1f64384ab5de640.js HTTP/1.1 Host: assets7.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:32 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 48235 Connection: close Date: Thu, 10 Oct 2024 18:28:33 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 17 Apr 2024 10:28:15 GMT ETag: "d46f9fafe9c1f9b32e2451806d677d40" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 17 Apr 2025 16:28:14 GMT x-amz-version-id: eNek9AjcVdT7x71dAGKdp1H9t1D.mHw7 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: nqOy4-m4Ki-tij3Mw88nfCTlgxjLd-4hnNQUom_Qa7BFpcUMlCQ7mA==
2024-10-10 18:28:32 UTC	6396	IN	Data Raw: 1f 8b 08 00 8b 9b 1f 66 02 03 ec 7d 6b 63 db 46 92 e0 e7 bb 5f 41 c1 8e 04 88 e0 4b b6 33 19 d0 10 c7 71 ec 8b 67 e3 38 17 3b 3b 97 a5 18 5e 8b 6c 4a 88 41 80 03 80 b6 14 92 f3 db af aa fa 81 c6 8b 94 9c c7 ce de ce ec 46 06 fb dd d5 d5 d5 f5 ea ea c5 3a 9a 65 41 1c b5 ae 78 f6 15 cb f8 cb 38 59 b2 cc e6 ce e6 03 4b 5a 99 ff f3 ff 5e f3 e4 d6 b6 ae b3 65 68 39 dd 39 cb 98 6d cd 75 41 cb 19 26 3c 5b 27 51 eb ab 67 ef 5e 4c 5f be f9 fe f5 b3 77 6f c7 d9 64 cc 27 bb 85 6a 7b 16 c6 29 67 97 21 7f 19 b2 f4 1a 1b b7 d2 2c 09 a2 2b cb f7 b3 db 15 8f 17 2d 7e 7c ac ba ea b2 90 27 59 37 8a b3 60 c6 3d f8 c7 b6 da bc 6d 39 96 33 ee 4f 46 87 4b 75 f9 72 95 dd da 4e f7 3a 98 73 db f1 54 5f 47 46 5f bc 3b bb 0e c2 79 c2 23 28 17 f2 e8 2a bb 3e ef ef 1b c2 03 68 bd cb Data Ascii: f}kcF_AK3qg8;;^lJAF:eAx8YKZ^eh99muA&<['Qg^L_wod'j{)g!,+-~\|'Y7`=m93OFKurN:sT_GF_;y#(*>h
2024-10-10 18:28:32 UTC	10416	IN	Data Raw: 38 6b b3 a7 91 08 0a 82 b2 78 6a de 72 34 d3 c7 50 70 82 97 28 8f 8f 23 a3 e5 ba 14 ac ab 87 87 2e c7 b4 96 20 f2 c0 41 2b 4c 45 74 6f fc 17 bc 38 9c e2 7d 6a 60 62 d7 78 2b 71 55 b6 aa 05 c8 54 12 0d 06 fc c0 59 0b 8d 5a 0f ce 1b 6b 67 40 47 f3 1c 57 5c d9 d9 d2 2f 6f df b1 2b d4 ae 01 5b ca d9 dc 92 0e d0 e8 4c 74 cd 79 86 5a 11 6a f9 2d fe 42 13 d8 b5 bf 21 c0 78 03 d4 7b 23 10 bc 3f b9 62 33 3c 71 c5 72 7a 03 38 f8 71 bb 71 10 05 e4 96 f1 06 ae c0 73 eb 41 bf df 07 49 27 c0 cd 85 38 07 cb bd e2 7c ee d1 0d e5 20 f4 90 6d 50 48 de 3d 7b e2 2e 56 a9 77 d6 77 7f 79 85 8c 81 77 c6 ff ec 6a 8d a0 47 64 2b 22 99 02 d0 d5 62 eb 2c 96 9b 59 7e e7 98 9d 70 74 14 06 a9 65 37 8c 0d 01 68 e7 a6 b6 81 2f ee 06 5b f4 4c 4d 83 74 32 88 51 55 98 fb df 12 d3 17 fb 82 Data Ascii: 8kxjr4Pp(#. A+LEto8}j`bx+qUTYZkg@GW\/o+[LtyZj-B!x{#?b3<qrz8qqsAI'8\| mPH={.VwwywjGd+"b,Y~pte7h/[LMt2QU
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: f1 32 8a 75 71 91 9e ba f8 c7 72 ad 2b 7c 60 43 bb 72 62 f7 c8 08 49 17 29 e6 d6 3a d4 8a 62 bd 9f 6c db 46 9e 6a b2 bd 98 6f c7 47 0f 2e 1e 7e 76 7c 72 71 7a d1 be e8 5c f4 fc 8b d1 c5 4f d3 ff bb b9 d8 ee fe 31 d9 92 c5 ea 19 1a 75 be fa d3 cb 97 17 eb 97 7f 26 6b d1 cb af 9e e3 8f af 5e d2 8f 97 2f 5e 4e 9c b6 7d d1 fd 1d 5a 75 4e 9d ad 6d 5f dc 9c 9d 39 30 6a fc e8 6f 2f 6e fa 7f 76 4e e1 bb 3f 87 ff 98 e3 8c 8c f4 36 fc b2 c7 f0 39 e8 c0 9f 2f e0 bf 4b f8 6f 06 ff 71 6d 00 83 21 de 9c 0d 60 18 37 67 8f 20 f1 c9 25 0e e9 e6 c9 1c be ff c4 ef 33 bc ad 7d 71 91 77 f6 67 a3 33 6a 6b 71 9f b6 e0 7f a7 77 9e 21 01 c4 71 fe 52 58 c9 7b 0c fb 53 6a e5 75 3a db 8b ee 76 ba fd c7 3d 2a 9f 7e 4a 8f 8e 73 d1 05 c4 92 55 3f 61 7e 7f f0 e4 ee 37 b3 d1 c3 9e 7c b3 Data Ascii: 2uqr+\|`CrbI):blFjoG.~v\|rqz\O1u&k^/^N}ZuNm_90jo/nvN?69/Koqm!`7g %3}qwg3jkqw!qRX{Sju:v=*~JsU?a~7\|
2024-10-10 18:28:33 UTC	1514	IN	Data Raw: cb 8e 83 1c 9b d7 23 23 10 11 3d c3 31 84 a2 28 19 b9 1d 5a a1 d8 3a 3a 0a a3 c0 47 ec 75 52 7a 4c 3c 4d 83 ee f0 ab 3a dc 1c d7 ac 07 41 5e 3f da 12 ad 01 3a f7 3d 10 7a 15 48 cf 04 15 46 d6 c3 b5 61 25 9d d2 2a 6a 94 52 8b 4f a5 6f 30 ea 2b 2b e4 ce 8a 9f 8a 0f 6d a3 15 f9 0a f0 d8 d9 89 14 55 e3 fc 19 b6 fb 43 b9 f2 47 d8 ee 1c e5 cb 1f e1 96 9e 0a 20 46 4a 28 fb 8e ef 81 61 09 b7 51 65 bc 5d 54 08 45 cf 01 69 6f ca b1 b6 46 2d 5f 61 59 f5 53 f2 13 6c 44 eb 35 7f d5 61 58 df 00 1b f3 10 d4 4b 76 41 d7 f1 bd 2e 79 65 21 4b 2e 2f cb ab 3a 01 96 5a 5c 51 5b 07 07 75 33 49 5a f3 d7 27 e9 b8 3b 8c d3 93 7a 3c 8c 07 c7 1a 30 1a 36 36 81 63 37 e1 ac 9d cc 2b 37 11 51 b0 35 39 90 b3 22 e0 1a 14 60 fd f6 a7 15 6e 6c f8 ba c0 f6 a7 94 ea d7 5e 35 45 84 63 39 14 Data Ascii: ##=1(Z::GuRzL<M:A^?:=zHFa%*jROo0++mUCG FJ(aQe]TEioF-_aYSlD5aXKvA.ye!K./:Z\Q[u3IZ';z<066c7+7Q59"`nl^5Ec9
2024-10-10 18:28:33 UTC	13525	IN	Data Raw: a0 9b da 10 04 8d 63 d7 21 83 ec d8 c7 59 67 24 0b c6 66 63 8d 29 74 37 a4 44 87 23 d5 d6 f0 e8 d8 2d e6 ab e6 54 61 d1 1e c0 79 cd ca 7c de 90 1d 74 43 e7 92 69 9a cd 83 60 db 79 b6 db d2 4e 18 54 04 bc 3f 0c fb df 3c 79 94 3e 86 ce 8a 46 e5 ba 72 b4 b7 55 17 14 18 02 92 58 8f 4a 22 da a1 bb 31 1c 85 b7 94 3c e4 55 ae fb e4 2b 1e 3c 94 06 31 b3 85 42 c1 6d b3 6e dd 6c cd b5 05 6d e1 1c 0e 0d 13 aa 79 11 e0 4d 52 01 4d 90 ad c6 69 f2 3e e3 ab 5e 07 62 48 2f 43 4a 67 f4 3d 8f 0b 99 ef 95 06 91 60 06 ae f1 c1 ba d9 56 ef c9 ae 7a ac db d8 ab 5f 1c 0c c4 35 08 54 f9 b4 5d f9 99 cd 8c 7e 47 f7 4c 4a 70 1c 9a 46 dd e1 e0 ab 6d d3 de 7f 22 a7 79 70 52 e3 e1 27 00 1e 95 3e 42 7f 61 6c d7 4b cf 1d 94 e3 7e e5 aa 3f 38 e2 23 4c 50 77 9a c5 fd 8e af 8b 0d 43 d9 c5 Data Ascii: c!Yg$fc)t7D#-Tay\|tCi`yNT?<y>FrUXJ"1<U+<1BmnlmyMRMi>^bH/CJg=`Vz_5T]~GLJpFm"ypR'>BalK~?8#LPwC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	18.245.195.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	432	OUT	GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1 Host: assets8.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:33 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 36298 Connection: close Date: Thu, 10 Oct 2024 18:28:33 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 12 Jul 2023 10:12:03 GMT ETag: "66b03ba3bb716fc88b1f55ba0e79c3b6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 11 Jul 2024 16:12:02 GMT x-amz-version-id: FX0J3GnHPC2RzwB9koXY8pR7p66GZ.1U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ead5678e9d868b4f736d4f5229db190c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG55-P2 X-Amz-Cf-Id: MuarIXAUsnDGkCdSpIKURX0v7zScVN7Qym86dnOAvfDQhujUXPGQhA==
2024-10-10 18:28:33 UTC	15345	IN	Data Raw: 1f 8b 08 00 6e 59 ae 64 02 03 e4 bd 6b 7b db 46 92 28 fc f9 9c 5f 41 22 5e 19 10 41 8a b4 93 d9 19 d0 10 57 b6 e5 89 df 89 2f 6b 2b 33 c9 52 8c 1f 98 6c 49 18 53 00 17 00 6d 6b 48 ee 6f 7f ab aa ef 40 83 92 92 cc 9e 3d cf c9 33 63 11 8d 46 5f aa ab ab ab aa eb 72 b1 ce e6 55 9a 67 9d 07 27 3e 0b 36 e9 85 df 65 41 c1 aa 75 91 4d 67 63 78 64 83 2a 3f 29 8a e4 46 94 76 54 81 1f 8c 2f f2 c2 ff 9c 14 9d 2a 66 83 25 cb 2e ab ab 30 8d 33 f6 a5 c3 2b 54 c1 b8 ea f7 c7 41 3a ad 66 31 83 7f c6 a2 8d 74 77 71 5b bf 7e f7 cd c7 bf b3 79 35 48 cb 17 a2 2e 54 dc 6e bd 69 4e e5 9d d7 f9 82 fd 90 96 d5 cc eb c6 2c 38 38 f8 a7 0f f4 0b 0e 54 94 ab b1 bd af 8a 34 bb 84 37 13 9f 41 db 25 3c ae fc 20 64 13 f8 bd 5a a6 95 7f 74 5e f6 8e 82 68 3a c3 ff 1b ad 7d 6f b4 86 03 f9 Data Ascii: nYdk{F(_A"^AW/k+3RlISmkHo@=3cF_rUg'>6eAuMgcxd?)FvT/f%.03+TA:f1twq[~y5H.TniN,88T47A%< dZt^h:}o
2024-10-10 18:28:33 UTC	1447	IN	Data Raw: bf 9d 61 af df 6e e1 37 14 41 c1 0c 0b 60 14 d0 30 08 38 4a 60 d6 c4 c0 ed ea d4 10 e6 e2 36 6b 66 53 c0 73 b6 65 d8 3a e8 80 9c 8c c7 36 c4 80 c7 6d 9e 5e 20 f6 c5 14 86 68 d7 26 f5 b9 3b b1 6c 1e 78 27 49 d3 a1 cc 0e 3f 6c 87 54 16 df 35 42 39 6b 19 ae 42 19 0e 2d a7 81 b6 a0 f1 9d d4 b1 46 1b 2e 1f 44 2d c9 a6 80 c1 1b 8e b9 07 ff 38 eb f5 02 c6 39 43 2b 18 ee 75 52 7c 6a e3 7d e1 eb 2a 46 7d df 38 85 af 2b 4c fb 8c 71 1f 30 56 9b d1 c2 3a fb 55 6d f0 80 6a 46 3b 29 fa 43 39 23 81 9b 1d c3 04 95 6d 46 6c 9a a9 c3 c9 9e 29 06 17 58 f3 d1 b8 3c 86 ce cb 7e 5f 5e 9f 66 d3 72 36 1e 75 e3 c2 34 4c 3a 38 e8 16 aa fd ed d6 e7 2f c9 37 2b 4e 60 c4 dc cc 58 a5 12 a7 1c 5b a3 d0 ee 7a 2c da c6 34 5b f7 6e 3f e4 6a e4 7a 94 9f 21 6e 81 5a dc 78 53 95 c7 13 89 0d Data Ascii: an7A`08J`6kfSse:6m^ h&;lx'I?lT5B9kB-F.D-89C+uR\|j}*F}8+Lq0V:UmjF;)C9#mFl)X<~_^fr6u4L:8/7+N`X[z,4[n?jz!nZxS
2024-10-10 18:28:33 UTC	8949	IN	Data Raw: 38 ad 39 63 1b db 2d 72 cc 32 b3 61 23 6b a0 13 2c 95 30 02 08 3d 8c 42 02 a7 53 3a 28 e7 49 e6 1f f9 78 9d f0 4d 34 f8 af e3 9e 1f 9c 97 fd 59 6f 7b 7e b8 3d 9f 0e 0e 27 e7 b3 80 5f 23 84 74 09 62 99 29 f2 e9 93 a5 93 b0 3c 0f 76 0e 21 a9 49 8f 38 65 a9 24 ad ce 8f 0b 22 2e 59 6d e1 80 e8 a8 86 43 43 ed 92 d9 0b 6a 64 c8 cd 8f 47 93 44 da f5 96 41 54 ee 76 ee 84 82 00 e5 26 37 ce 3b 88 ef a8 8c 27 95 a2 f6 74 a5 7c c8 75 ed 3c e7 0f d0 55 08 83 dc d5 e3 a2 db 89 5e 79 2a 05 ca b8 53 70 6b ff 96 c5 94 c9 fd ba 3a b9 5f 45 0e e1 57 11 06 47 8b 1c 8e 34 24 94 5e 51 60 61 fa 85 2e ca 3a aa 30 a0 1a e5 cb e2 01 a7 42 4c 4e 23 f8 ae 8d e1 40 6f 6c df 6e 65 50 d3 8a c2 94 71 b4 a5 9f 00 28 4a 3f 0d 47 35 e5 29 c3 1d 47 41 4b 31 ec 2e ef 03 d9 a8 41 45 9a 59 bf Data Ascii: 89c-r2a#k,0=BS:(IxM4Yo{~='_#tb)<v!I8e$".YmCCjdGDATv&7;'t\|u<U^y*Spk:_EWG4$^Q`a.:0BLN#@olnePq(J?G5)GAK1.AEY
2024-10-10 18:28:33 UTC	10557	IN	Data Raw: 7e 8a 23 ed cc 81 8d ee 10 41 eb 48 5f 17 fa f1 37 92 20 3a 5c 90 e8 a0 dc 01 ff 54 95 ee 0c 65 37 ae 89 eb 5c c3 a6 49 33 3e 75 f1 80 b3 12 3f df 19 75 a0 77 fc f5 89 15 dc 94 17 1e be aa 46 be f2 81 5d a7 99 2c 4a 33 5e 24 4e f6 0e 1c c7 d8 2d 9f 9e 78 10 0d 89 27 5e 7f 05 3b 14 c6 28 46 24 9e 68 48 e2 37 1f 93 78 c0 41 91 8e a4 83 99 c3 31 bd 7a 86 61 22 57 1d 12 ad 3a 5f 00 6e 72 d2 ff a0 e4 eb 9e 8d 4f fc ac 8f e1 50 6f 9e ea ec 7a cb be 6e 57 5f b7 69 b6 9d 5f 6f af af b7 ab 6a bb 9a 6f cf ff 25 08 b6 c3 07 47 32 2a ef 87 0f 9a 3f 17 6d 37 72 0d c9 70 7e 8b f4 b3 d7 16 ce 97 bb 45 d4 03 49 84 15 0f 25 d1 9a d7 50 a4 8b 11 49 34 cc 8e 54 d8 40 24 21 e2 08 8c fc f6 51 03 0b 9a b1 02 33 2c c5 0f 9f 40 03 1d ce 00 7b 0f c9 a8 bd f7 d0 3b 7e 72 04 c5 c7 Data Ascii: ~#AH_7 :\Te7\I3>u?uwF],J3^$N-x'^;(F$hH7xA1za"W:_nrOPoznW_i_ojo%G2*?m7rp~EI%PI4T@$!Q3,@{;~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	104.17.25.14	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	595	OUT	GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:32 UTC	962	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:28:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec2-ad3" Last-Modified: Mon, 04 May 2020 16:11:46 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 41582 Expires: Tue, 30 Sep 2025 18:28:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MckZNI%2FFi20cJR1%2FLleJ6ZRj1lvSZuT2VlxZTuoViwUF%2F3GERESxwVU6pkKHBptEVudWjNPJAeHGAHqwHQTd2uSlLoOshJ%2B%2BecSXlu%2Bs8cPKy8oxcRw3LqIsjEUqwCKpHZ6pqlvl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d08abb76bb042f1-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 18:28:32 UTC	407	IN	Data Raw: 61 64 33 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 75 73 65 77 68 65 65 6c 20 33 2e 31 2e 31 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ad3/! jQuery Mousewheel 3.1.13 * * Copyright 2015 jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2024-10-10 18:28:32 UTC	1369	IN	Data Raw: 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 22 64 65 74 61 69 6c 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 74 61 69 6c 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 59 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 58 22 69 6e 20 67 26 26 28 6c 3d 2d 31 2a 67 2e 77 68 65 65 6c 44 65 6c 74 61 58 29 2c 22 61 78 69 73 22 69 6e 20 67 26 26 67 2e 61 78 69 73 3d 3d 3d 67 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 6c 3d 2d 31 2a 6d 2c 6d 3d 30 29 2c 6a 3d 30 3d 3d 3d 6d 3f 6c 3a 6d 2c 22 64 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 6c 74 61 59 2c Data Ascii: .type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,
2024-10-10 18:28:32 UTC	1002	IN	Data Raw: 5b 67 5b 2d 2d 6a 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 76 61 72 20 6b 3d 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 31 2e 31 32 22 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 66 6f 72 28 76 61 72 20 63 3d 68 2e 6c 65 6e 67 74 68 3b 63 3b 29 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 68 5b 2d 2d 63 5d 2c 62 2c 21 31 29 3b 65 6c 73 65 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 3d 62 3b 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 2c 6b 2e 67 65 74 4c 69 6e 65 48 65 69 67 68 74 Data Ascii: [g[--j]]=a.event.mouseHooks;var k=a.event.special.mousewheel={version:"3.1.12",setup:function(){if(this.addEventListener)for(var c=h.length;c;)this.addEventListener(h[--c],b,!1);else this.onmousewheel=b;a.data(this,"mousewheel-line-height",k.getLineHeight
2024-10-10 18:28:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	18.245.195.5	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	434	OUT	GET /assets/cdn/frameworks-f591442b919f150f5c0b50e1012a34829e8a6ae061cdc17eb1c2cda99e8baf68.js HTTP/1.1 Host: assets2.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:33 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 537164 Connection: close Date: Thu, 10 Oct 2024 18:28:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 21 Mar 2024 14:43:26 GMT ETag: "c899e6357a193e5f5aaba4b64d1037f4" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Fri, 21 Mar 2025 20:43:25 GMT x-amz-version-id: okbPQvX7JgjooqoejvY6Wrg2YlBH81DQ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9276702fee01c12b5affcc505e68b2d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG55-P2 X-Amz-Cf-Id: eMuo9Os1FmeRx5hb7goCBcfHVAt_VN8zGW1xvDa-lDPOX_7EQZDFvQ==
2024-10-10 18:28:33 UTC	15697	IN	Data Raw: 1f 8b 08 00 d5 3e fc 65 02 03 ec bd 79 9f db 46 92 26 fc ff 7e 8a 22 ec a1 00 31 c9 2a 4a b6 67 1a 14 8a ab b3 a5 6e 5d 2d c9 e3 ee 61 d1 b5 28 32 ab 08 89 04 68 00 94 54 2e b2 3f fb 1b 4f e4 81 04 08 ca 72 cf cc ee ce be e3 9f 55 04 12 79 67 64 64 44 64 1c 97 9b 74 56 26 59 7a f4 28 2e e3 27 f1 ac cc f2 6b 5f 06 37 e5 22 29 06 1f e4 75 24 b7 5b 2f 99 7b 82 13 0a fa 2c a3 9b 9d 7a 9b 6d f2 5c a6 25 4a 46 93 a9 4e 8b 67 0b 39 7f 96 ce e5 67 9b af 90 65 74 a9 db f1 a5 28 75 ed 5c d9 44 4e a3 52 e7 bb aa e5 0b 6e 72 59 6e f2 f4 e8 60 bd ba fd 57 17 ef 23 a9 52 ce 37 eb 79 5c 4a f4 c8 af b5 11 f0 f7 dd 5e ae 5a 7b 7b 83 92 bb 9d f9 7e 34 cb a5 2e f3 16 75 22 ff 65 96 fb 1f e3 fc a8 3c 4a d2 23 19 c8 c1 22 2e 5e 7d 4a 5f e7 d9 5a e6 e5 b5 5f 06 dd ae 2d 80 59 Data Ascii: >eyF&~"1*Jgn]-a(2hT.?OrUygddDdtV&Yz(.'k_7")u$[/{,zm\%JFNg9get(u\DNRnrYn`W#R7y\J^Z{{~4.u"e<J#".^}J_Z_-Y
2024-10-10 18:28:33 UTC	2027	IN	Data Raw: d7 7c cb b3 47 0d 12 11 57 40 2d 12 d0 e6 35 5c b7 fb bc 92 0f 37 ae d5 2a 85 9d 64 4c e4 64 38 99 ee 08 a7 68 3e b5 de a2 dd 5e 96 2d bc 90 84 06 6d 05 ad 6b b6 7f e9 c4 2c fd 2e 08 8d 51 b7 1d dc 7f 40 b3 6a 90 07 a5 c2 b6 27 ea 4e 63 3f 4d f5 d0 b1 fd 49 b4 8b 3a d5 67 51 31 90 51 3b e8 8e db 38 86 df 5a 23 a7 f8 c1 eb c9 90 2f 0a c7 2d b1 cb a5 bd 91 6f d7 35 00 03 62 cc da 0e 54 3e b2 86 26 5a b0 33 4a ac 29 1b a4 bb 49 0d 71 69 56 be 92 56 1a 35 88 9d 99 1f 26 ce a2 c3 17 a8 ff e0 24 39 35 3c 1f 1f bc 5a ad e6 43 bc c4 d8 9f e1 8f ba 67 75 76 78 73 1a 59 2a 5a df d4 fb bb d9 ba 47 f4 ee c5 47 ea 8e f3 69 cf bb 75 7a ef 38 3e bd a7 48 99 2a b9 0f a6 e7 d6 d1 aa e0 80 57 b3 78 8d c0 50 d1 2d ca ad 9c 1c 1e 59 5f 86 48 3b 56 89 f4 a0 92 4f 3d d1 e2 ac Data Ascii: \|GW@-5\7dLd8h>^-mk,.Q@j'Nc?MI:gQ1Q;8Z#/-o5bT>&Z3J)IqiVV5&$95<ZCguvxsYZGGiuz8>H*WxP-Y_H;VO=
2024-10-10 18:28:33 UTC	1024	IN	Data Raw: 0a fb bf 35 10 9c 12 5f 58 f0 0e 2f 78 a7 b6 e0 44 95 d3 48 a9 2a 8c e3 1f 1b 83 99 9d 6b 3a 4c 17 1c ba 98 66 d4 6c ac eb 7e 54 f0 20 68 bb 5f ff 53 4a 0f 27 dd ee f5 71 0a db f4 5d cb c9 6b f5 e3 58 bf 72 cd b4 5a c1 53 f4 09 72 c7 27 da 29 61 63 64 0e 15 41 e8 5a 5f 9f 12 9d af ca 2b 1a bf 72 15 f7 74 3a 8e 11 e9 39 ae d4 a3 89 35 9f 48 01 5b 5c 91 4c 85 db 54 43 d1 c9 6f da 1d 8d 1d d5 df da b5 2f 94 45 63 1e 50 cd 91 36 a8 79 62 79 e0 4b 16 6e b8 70 82 a7 d0 62 55 de 4e 91 b2 0b da 8e 54 54 05 37 f2 3b 84 c7 24 d2 50 cd 4c 78 93 66 65 98 b6 88 7b 39 a8 27 5f 89 bc 6d b1 f1 a9 6c 4e 31 1b f5 21 d4 d5 b9 a1 84 5d 58 76 9f d5 92 dd 40 10 ac a9 1b 47 b9 d6 bf 96 ec 87 cf 47 20 b9 08 31 ad dc a1 b0 bf 76 7b 0e 33 31 23 0a 44 96 42 cd f0 27 21 38 91 5f 3b Data Ascii: 5_X/xDH*k:Lfl~T h_SJ'q]kXrZSr')acdAZ_+rt:95H[\LTCo/EcP6ybyKnpbUNTT7;$PLxfe{9'_mlN1!]Xv@GG 1v{31#DB'!8_;
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: 57 89 82 de 29 67 06 51 3d d2 59 1c 9d fb 25 47 29 60 3a 3f 35 f6 7f 61 61 bd 99 50 a5 d4 da b5 5f b0 49 4f 6c 05 c6 91 74 34 7c ee 5b 49 72 b4 4f 1b 37 9d f4 b6 39 6c 82 05 f7 26 82 59 08 75 34 9a d9 56 70 29 e3 7a bb 00 65 64 9c 0c 28 7e 9e 23 a2 f3 9f ea f6 c0 b2 2a 77 08 51 3f 7b c4 b1 37 72 15 aa 41 63 6b ab 46 a7 74 30 5d 1b f1 e7 b0 08 b2 e6 54 31 0b 68 d9 7e 8b 2f b0 a3 4a ed ce cf cd 55 9b 0b 88 9a 2c 2e d9 2b 38 02 0e 8b 8e 63 8a 31 63 09 66 8d dc 13 95 7d 54 6c 00 4d 5d df 98 71 ee 94 eb 1a 84 4f 72 54 b5 ad df d5 13 cb 9a c1 28 95 fd 64 c4 30 1d 75 ad c2 b2 28 d7 a3 50 86 bd cb 48 0d 43 33 22 29 21 9e 2f 8d c6 38 61 88 8d e1 5e ab 33 06 ed 95 22 36 b7 2f 85 18 62 74 a9 d5 95 60 d3 d2 4e 8b 47 8c 14 7e 36 b4 a8 40 33 11 b3 ed 16 81 7d 37 41 e0 Data Ascii: W)gQ=Y%G)`:?5aaP_IOlt4\|[IrO79l&Yu4Vp)zed(~#*wQ?{7rAckFt0]T1h~/JU,.+8c1cf}TlM]qOrT(d0u(PHC3")!/8a^3"6/bt`NG~6@3}7A
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: fb 1d 38 66 aa 43 88 78 4c 43 c5 1c f4 31 c9 7c 34 b0 a8 e7 06 4e 90 fa 27 ab 53 c3 62 b3 79 07 77 78 1a af 6b 44 2b ac 56 6f 19 cb 33 5c c7 b3 9b f8 5d 7c 3b 8f 12 bc c0 f1 a4 d3 6f 29 fd 6c 6e 2b 45 38 d5 f0 6d 14 bf d5 d3 b9 d8 df bf 30 bc 57 36 0d 78 e9 dd 2c 40 91 82 84 9f be 90 3e 52 55 57 d4 f2 4d 82 ea 2e 01 f8 9b 3b 8d 50 da 02 98 43 a6 2a 2e fa 5c 39 78 48 69 ca 73 70 80 d5 cd 24 d5 89 27 e3 95 41 64 33 58 6e 6c 7b 9e 36 ed 40 30 88 82 03 9c 3b d8 17 f1 2a 5e 00 11 33 be 4a ed 46 ba 59 c3 51 82 a4 da 75 7a 75 a8 76 ea 66 73 15 5f d8 47 ac 08 17 cd fe f0 97 7f 22 e8 02 fb cd ae 85 5d e1 30 7a d7 a8 f6 f3 fc 82 66 0e 71 1a e3 4b 3c 3f 27 31 0e c0 1f f0 17 29 17 88 c9 7b 5d d5 ef 03 0c f3 95 33 f0 0c 86 7b 86 03 ea 3d fe 39 27 59 ed 4d 1a 48 d0 38 Data Ascii: 8fCxLC1\|4N'SbywxkD+Vo3\]\|;o)ln+E8m0W6x,@>RUWM.;PC.\9xHisp$'Ad3Xnl{6@0;^3JFYQuzuvfs_G"]0zfqK<?'1){]3{=9'YMH8
2024-10-10 18:28:33 UTC	2048	IN	Data Raw: ab ce f7 fd c1 7b db e0 6d a8 3f 11 43 b4 bf af 3a 2a e2 3e 52 e9 60 95 6e ba 25 6f 50 f2 45 d6 5e 1d 66 e7 4d a7 cd 77 9d 36 4f 7e ef bd fe a9 ff da e7 19 b7 4d 7a 34 5b e6 17 9d 95 50 cd 3e 21 99 b2 79 9a 1e 4f 03 62 83 9a a4 89 17 34 32 9f ce c1 cb a5 e6 57 82 1f 9a 1d 3d 89 12 62 1a e3 25 bd fd fd fc c0 7c a6 de 7f 2b 4e 9f b6 21 ed 4d ca 49 7b 51 36 57 35 fb 1d 8d c1 78 95 ac c6 8d 46 e1 1f 5d 58 ba a4 29 03 0b f7 42 4e 3c d6 44 13 b9 36 cd b5 1d 3c fd d3 40 03 33 11 09 56 94 10 24 a0 90 58 fe f3 e9 bb c7 bf 9b 8f 55 08 c2 36 8a a2 52 ef f1 63 67 8f bb 65 50 e2 ee f1 b6 5f 24 f8 6d 20 25 74 2b a9 53 22 9c 26 e1 ec e4 e0 8f f3 d3 e5 a3 e8 f4 c1 e6 34 0c a9 f1 08 fa 85 88 04 b7 d3 31 fd 73 bc 79 38 fb f9 c1 9c 7e 1d 20 69 89 b4 69 72 7a c8 3f e9 f7 ec Data Ascii: {m?C:*>R`n%oPE^fMw6O~Mz4[P>!yOb42W=b%\|+N!MI{Q6W5xF]X)BN<D6<@3V$XU6RcgeP_$m %t+S"&41sy8~ iirz?
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: 2f d5 4d f4 bb b1 3a 23 32 c1 da 46 3e 0f 7b f5 32 9a 7b 13 b7 d7 ff 12 dd c9 d4 af 58 c4 6e 24 fa de bb 14 61 82 f2 8b 8a 79 9e f7 ef 38 da 13 df 55 45 de 45 8c 23 19 c8 68 b4 d6 e9 35 f1 3a 41 58 45 42 5c de bf fb 80 46 14 81 34 e6 4f 45 7e 6d ac 08 14 f3 22 c7 38 cb a9 34 b8 4c b7 98 b1 a3 23 8f 3f 2a 64 e5 1d 46 9d 1c ec fa 0d 0e 63 5a 69 09 fe de 74 fb df 3f be ff c9 ed 77 bb d7 09 ec bf 3d 1f f7 7e 5e 00 3d ed f9 1e 5b c5 aa 0f df ac c1 c3 21 ac 28 6e 12 35 4b 0d eb c6 c3 94 c3 f8 18 db 37 ee e3 0b 5a 6c 45 14 4f 2b f7 c4 09 ab 06 0b 62 58 c0 b8 d5 f7 88 39 f5 3d 9d e7 2d 25 84 c1 da 76 ba 1f 33 6b 20 41 1f ff c4 3e 04 1c b4 d8 4d 40 08 92 c0 bd 3c d2 8a 2e e4 f4 c0 80 f6 77 8b df a0 5f 53 62 7d fc 22 08 7d 73 8f d9 9f 9d 58 79 fd 1e 1f 31 80 b9 6c Data Ascii: /M:#2F>{2{Xn$ay8UEE#h5:AXEB\F4OE~m"84L#?*dFcZit?w=~^=[!(n5K7ZlEO+bX9=-%v3k A>M@<.w_Sb}"}sXy1l
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: 9f e3 4e ec 19 cc 68 d0 05 f7 fe 50 5e 7d 87 57 68 89 59 16 d6 2e c7 9a e0 ec 1a 00 ac 8b b4 58 30 dc b3 a9 07 c5 0f 9e 99 a2 f5 d3 d7 96 c6 33 1e ba b6 e7 ad c6 37 a7 6c d8 98 97 6e 7f 5a 73 31 74 47 9c 83 1b 34 8c af 79 d7 1b 4b 90 a9 c9 ab 2f 1e 1a 35 0d 16 b2 b2 8f 9f 71 3f dc 62 e9 95 31 0f de d9 17 51 46 5d 29 b4 36 9c 6d 69 f8 f3 c8 e4 8d 2c 40 4c b3 1a e3 c7 d4 a8 40 fb 33 2d 70 10 37 b4 f7 3d 67 3c ee 59 be ea 88 47 41 38 e1 17 fa 84 c7 a5 42 ff 01 8f 37 bf 71 be 33 63 c3 a7 3b 38 61 7b b8 27 8e db 48 ef 09 ef 64 88 1e b4 bf 08 ce f7 63 6d 58 af 8f 79 6b b6 53 87 b6 65 53 52 18 96 1a c3 7b 58 d6 6b c4 50 87 29 e0 51 3f 3a d2 a0 2e fa b9 2f a3 89 a4 66 73 6a d3 d6 9e ac a2 81 c0 a9 20 bf c4 95 d0 7e a8 ad ff 7a 3e 34 b0 44 36 ab b6 89 da cb 99 68 Data Ascii: NhP^}WhY.X037lnZs1tG4yK/5q?b1QF])6mi,@L@3-p7=g<YGA8B7q3c;8a{'HdcmXykSeSR{XkP)Q?:./fsj ~z>4D6h
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: ed cb d4 54 97 a1 d0 61 b5 1d 3a ec a4 be 82 80 be fd a8 b9 aa 19 9d c6 66 11 72 19 de 85 85 8f d2 35 56 ec 4a d8 03 55 99 f6 66 33 20 92 90 62 c4 15 3e 80 f4 af b0 45 8a 9b e3 b2 a2 af 88 25 49 5c 95 d5 a8 8f 8a 49 97 e5 26 f8 55 ca 20 e6 8e cc 75 61 4b 55 01 7c b9 31 c9 e8 54 4a ff 21 ea 86 f7 45 ca 5a bb 77 8d 04 84 9b 57 5d 9d bc 69 fa a4 60 92 fb aa 9c 3f 79 b2 bd 02 35 dc e6 aa 14 fb fc ee aa 5c 4e 31 9d 66 41 38 f5 fc 72 a0 67 e7 5f 3c 79 b2 1a 0f 7c be dc 3e 79 b2 b8 1c ea 3d 14 b1 1c 0f 7d bf bc a3 b6 ad 57 d8 3a d5 32 90 f2 13 b8 d8 22 0f 8f 02 22 e6 75 ec 50 92 07 07 31 a3 c2 fb d5 76 7e c7 45 a7 6a 58 36 bb dd 52 0d d1 6e b7 b8 da 88 d6 5e dd 21 bf cb c3 58 ed 76 2b 35 a4 bb dd fc aa 12 83 72 b5 cd a6 92 c7 2b 78 75 8a fd e0 81 d2 94 0f 72 d3 Data Ascii: Ta:fr5VJUf3 b>E%I\I&U uaKU\|1TJ!EZwW]i`?y5\N1fA8rg_<y\|>y=}W:2""uP1v~EjX6Rn^!Xv+5r+xur
2024-10-10 18:28:33 UTC	16384	IN	Data Raw: 53 4d db f4 2f f0 3e 33 b7 22 6a fb c0 1c 37 8b 9f be a6 72 52 45 1f 95 96 05 fc 98 65 58 9c 54 58 e2 f5 a6 24 2c f8 21 e1 a8 e2 de 51 6d 2e ec fc 41 99 82 3a b8 05 e1 d3 44 0f 95 de 7f 83 6a 73 9d 61 cf a4 9f d7 08 70 0e 3c 86 74 b4 a9 c0 b0 74 ad 97 f1 61 2d dc 43 88 2a a7 6d 5e 93 dc 3c 15 5a 59 2d 18 5e 1a 0d 82 20 c3 ea 43 03 3e 0f 4a 29 d7 e4 fc 29 c3 88 cf 52 3d 81 f6 7a d0 5a 67 31 9b 5e 17 16 81 a8 ee 65 7d 4e aa 8b fa 02 82 40 48 b4 b9 af 09 b2 c5 d6 65 38 9f 49 b3 91 cd 8c 19 26 ad a0 b1 4a 03 c3 41 68 a0 b6 a3 aa 9a 06 26 a7 9d aa 40 ae 52 a4 1d 18 80 00 ca a9 d2 46 db f4 03 4e 58 7e 7a c1 3e 9f 9e f2 a4 97 22 f2 6e 8f 5a 5e af b3 e2 fc 19 ea 2a 2b 71 68 f7 4b aa 88 1c 82 1b 1d 6c 5a eb b5 13 0c be 8c a9 e8 dc 6f c1 41 13 a9 e8 d6 b5 d7 5d 8a Data Ascii: SM/>3"j7rREeXTX$,!Qm.A:Djsap<tta-Cm^<ZY-^ C>J))R=zZg1^e}N@He8I&JAh&@RFNX~z>"nZ^+qhKlZoA]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	52.217.140.136	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	720	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261799/logo/ZVAlJh7qH3kuFxlIk0Jf-xB-Clir31is5w.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T132508Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=674e0ee39d0c749457254fc6f216460c8583d272046a8cd6eab3a0def0dd0998 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:32 UTC	503	IN	HTTP/1.1 200 OK x-amz-id-2: zPl+t5SCqzi+Tfefn/V0se1uaeQMD2YGRZv8/sTCqWRgzMBT1g3CToztL8B2D7t2jxaNOj52NMs= x-amz-request-id: 8YYGYW89DAS3KXG2 Date: Thu, 10 Oct 2024 18:28:33 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 13 Mar 2024 14:59:15 GMT ETag: "24e57a81046c39dd5b37f0201d32a914" x-amz-server-side-encryption: AES256 x-amz-version-id: smaKCCkSHqIkDEr7WNe_JDCydUsnQP_1 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 3966 Connection: close
2024-10-10 18:28:32 UTC	3966	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 03 0d 0e 3b 0e 52 9d 7e 77 00 00 0e 82 49 44 41 54 68 de ed 99 7b 70 5c d5 7d 80 7f e7 71 9f 7b 57 bb 7b 57 bb 92 56 0f 24 59 46 08 cb 0f 2c 21 5c 61 f3 8a 07 04 2e a6 10 6c d7 d3 c6 21 c1 8c 61 02 25 69 4b 66 f0 4c 93 32 34 84 96 69 c2 a3 ad 69 1a c0 13 6a 88 31 01 4a 5b 8f 2b 03 c5 e6 21 c5 03 c8 d8 d8 c2 96 2d 55 5a eb b1 6b ed 43 bb 77 f7 be cf e9 1f d8 8c 83 95 7a c0 c4 a4 33 fe 66 f6 8f bd 7b Data Ascii: PNGIHDR22?gAMAa cHRMz&u0`:pQ<bKGDtIME;R~wIDATh{p\}q{W{WV$YF,!\a.l!a%iKfL24iij1J[+!-UZkCwz3f{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	54.85.43.134	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	763	OUT	GET /assets/strftime-min.js?1728540009 HTTP/1.1 Host: darwynnfulfillment.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _helpkit_session=UTdsWmN1bDZLV0s0SWU3NFZVMnNOQjc5RlVqSWg4MmxHSm55MEF4OW5DTU56aUF2aTNCUWV0OWE2OEQrcDdaM0FUcnR3VzdINTBQYlQwcUZHdVFUZVNJRUNsaWEyTWNjSll3UTZhSUVUMDlJMVFtK2J0RklKNnRJaSt0THlGcHA5NVBvMTN4Sk5DS3Bna0pXRUlLeURDUHpjTkFYaXFkM3d0bU9FY2pmMzRXUUVwcmlrcUpGbEpBUmQ0VFJJbW9aLS1SWW8vNWZGTE1aOFFCaU1OQjRXVjZ3PT0%3D--73a01056bb3367c16f7028a1b436995e250ce9a7
2024-10-10 18:28:32 UTC	6192	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:28:32 GMT Content-Type: application/javascript Content-Length: 3975 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: 27897c9d-e3be-47ed-9ff8-98a330a50d4b Etag: "6811a768981410d46b9e7952a7b82577456785ac3956f82c032a1beece396e9b" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] Set-Cookie: _helpkit_session=ZGVoMHRabWlNZlVDWWpta3BJNFErOStHQzBLeXFPSy9hV3crWjlTWmE0WGVtREhabVY4T1EvcllNN0tvc3ZXV2ZxaXZObHYvOWlLVG5lZmZDOHNYdE81d3RBMHhvcmFDdnJoM3FpVnFUQUtYTWFFWlRndVNvd0QzN01URjdCb281c0VtYncvZVpVdGgzcndGY0lhaVJPN1RrclFZaS9adzhCSnF5V0RacmY3YVZTcEErM1dLZWsvakE4a1RKS3lnLS1LcEVPUWNUL2xFa2t6dys5NG9wRndBPT0%3D--8eb0d5a0392b5cf2b4a9571ca31fa7d2323c6b9d; path=/; HttpOnly; secure X-Fw-Ratelimiting-Managed: false X-Envoy-Upstream-Service-Time: 25 X-Trace-Id: 00-6bbf204b3eb3ef71fe9f1ea957466042-681d21b380f2beca-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} Server: fwe
2024-10-10 18:28:32 UTC	3975	IN	Data Raw: 44 61 74 65 2e 65 78 74 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 2e 78 50 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 31 30 29 3b 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3c 61 26 26 61 3e 31 3b 61 2f 3d 31 30 29 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2b 65 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 63 61 6c 65 3d 22 65 6e 2d 47 42 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,a){for("undefined"==typeof a&&(a=10);parseInt(e,10)<a&&a>1;a/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsBy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 18:28:33 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=166601 Date: Thu, 10 Oct 2024 18:28:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	104.17.24.14	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:33 UTC	403	OUT	GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:33 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:28:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec2-ad3" Last-Modified: Mon, 04 May 2020 16:11:46 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 41583 Expires: Tue, 30 Sep 2025 18:28:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qXZCzCDirCSjGwLHZ5ASxtT6SM4XfVd4%2BSzEGLeQwC5LecS19Yy6TfkABz%2BPo8%2BCkU5%2BT%2FRuwaJkJibJ2fUD9Etr%2F2b2q4YD5aafdrrNRPgCkpPIINCoMoU3vE4iGRTWrLb8W%2FX0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d08abbb4c2343ad-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 18:28:33 UTC	405	IN	Data Raw: 61 64 33 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 75 73 65 77 68 65 65 6c 20 33 2e 31 2e 31 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ad3/! jQuery Mousewheel 3.1.13 * * Copyright 2015 jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2024-10-10 18:28:33 UTC	1369	IN	Data Raw: 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 22 64 65 74 61 69 6c 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 74 61 69 6c 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 59 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 58 22 69 6e 20 67 26 26 28 6c 3d 2d 31 2a 67 2e 77 68 65 65 6c 44 65 6c 74 61 58 29 2c 22 61 78 69 73 22 69 6e 20 67 26 26 67 2e 61 78 69 73 3d 3d 3d 67 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 6c 3d 2d 31 2a 6d 2c 6d 3d 30 29 2c 6a 3d 30 3d 3d 3d 6d 3f 6c 3a 6d 2c 22 64 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 6c 74 61 Data Ascii: ,b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.delta
2024-10-10 18:28:33 UTC	1004	IN	Data Raw: 6b 73 5b 67 5b 2d 2d 6a 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 76 61 72 20 6b 3d 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 31 2e 31 32 22 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 66 6f 72 28 76 61 72 20 63 3d 68 2e 6c 65 6e 67 74 68 3b 63 3b 29 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 68 5b 2d 2d 63 5d 2c 62 2c 21 31 29 3b 65 6c 73 65 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 3d 62 3b 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 2c 6b 2e 67 65 74 4c 69 6e 65 48 65 69 67 Data Ascii: ks[g[--j]]=a.event.mouseHooks;var k=a.event.special.mousewheel={version:"3.1.12",setup:function(){if(this.addEventListener)for(var c=h.length;c;)this.addEventListener(h[--c],b,!1);else this.onmousewheel=b;a.data(this,"mousewheel-line-height",k.getLineHeig
2024-10-10 18:28:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	3.5.21.134	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:33 UTC	707	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_icon/FySB4N0Dof4unBE7hZXBHx8yOpu64TWbMw.png HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://darwynnfulfillment.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:33 UTC	523	IN	HTTP/1.1 200 OK x-amz-id-2: Au18H7ag2g21SqO1daS2wvUFG29dOe9pqm8oGmIGnmeP+FhotcDp3gXRNeHyZ87+O1i0snrfzPIIljCaAJPpfVb1M0gIXV4q x-amz-request-id: 322V0R7YJHRC3KNB Date: Thu, 10 Oct 2024 18:28:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 13 Mar 2024 14:59:19 GMT ETag: "5a3abb67f0a2665c3126062e204524a8" x-amz-server-side-encryption: AES256 x-amz-version-id: jIkK4IVAvJfQbAE2T5d7nmSHaoV4Si24 Accept-Ranges: bytes Content-Type: image/png Content-Length: 2104 Server: AmazonS3 Connection: close
2024-10-10 18:28:33 UTC	2104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 03 0d 0e 3b 12 46 9c 22 38 00 00 07 3c 49 44 41 54 58 c3 ed 56 4d 6c 54 d7 19 3d df bd f7 fd 8c 67 c6 33 b6 c1 d8 1a 3c b8 50 f1 63 a0 18 91 56 a1 a9 5b 84 aa a8 42 ad 10 11 d0 14 d1 aa 48 6d 15 75 41 95 45 2b aa 46 62 91 74 d3 76 41 58 76 51 21 82 04 a5 4a 4b 51 94 08 aa 56 84 a0 84 24 fc b4 32 a4 36 c1 60 63 6c ec b1 f1 d8 6f e6 bd 79 ef dd bf 2e 22 d2 34 12 60 89 a0 6e 72 96 f7 ef 9c 7b ee f9 3e Data Ascii: PNGIHDR szzgAMAa cHRMz&u0`:pQ<bKGDtIME;F"8<IDATXVMlT=g3<PcV[BHmuAE+FbtvAXvQ!JKQV$26`cloy."4`nr{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 18:28:34 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=166641 Date: Thu, 10 Oct 2024 18:28:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 18:28:34 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49757	52.217.140.136	443	3844	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:28:33 UTC	455	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153006261801/fav_icon/FySB4N0Dof4unBE7hZXBHx8yOpu64TWbMw.png HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:28:34 UTC	503	IN	HTTP/1.1 200 OK x-amz-id-2: puT97IpqwYTYSP2DiNO5+7yRW4VcNOzU6pvpBgr9nThRsUJZN14m9cZQIHBlD1VoVPujZR9aoEc= x-amz-request-id: 322JZP79AZFKFXQY Date: Thu, 10 Oct 2024 18:28:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 13 Mar 2024 14:59:19 GMT ETag: "5a3abb67f0a2665c3126062e204524a8" x-amz-server-side-encryption: AES256 x-amz-version-id: jIkK4IVAvJfQbAE2T5d7nmSHaoV4Si24 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 2104 Connection: close
2024-10-10 18:28:34 UTC	2104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 03 0d 0e 3b 12 46 9c 22 38 00 00 07 3c 49 44 41 54 58 c3 ed 56 4d 6c 54 d7 19 3d df bd f7 fd 8c 67 c6 33 b6 c1 d8 1a 3c b8 50 f1 63 a0 18 91 56 a1 a9 5b 84 aa a8 42 ad 10 11 d0 14 d1 aa 48 6d 15 75 41 95 45 2b aa 46 62 91 74 d3 76 41 58 76 51 21 82 04 a5 4a 4b 51 94 08 aa 56 84 a0 84 24 fc b4 32 a4 36 c1 60 63 6c ec b1 f1 d8 6f e6 bd 79 ef dd bf 2e 22 d2 34 12 60 89 a0 6e 72 96 f7 ef 9c 7b ee f9 3e Data Ascii: PNGIHDR szzgAMAa cHRMz&u0`:pQ<bKGDtIME;F"8<IDATXVMlT=g3<PcV[BHmuAE+FbtvAXvQ!JKQV$26`cloy."4`nr{>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	60208	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:24 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:24 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: 933bb64d-501e-00a3-36e1-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182924Z-17db6f7c8cf9t48t10xeshst8c00000000hg00000000u1ns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:24 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-10 18:29:24 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	60210	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:25 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:25 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182925Z-17db6f7c8cf58jztrd88d8aypg00000000h000000000d921 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:25 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	60212	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:25 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182925Z-17db6f7c8cfdpvbpevek8sv5g400000000rg00000000kce6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	60211	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:25 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:25 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182925Z-17db6f7c8cfdpvbpevek8sv5g400000000u0000000005g5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:25 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	60209	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:25 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:25 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8437bb86-c01e-007a-7474-1ab877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182925Z-185b7d577bdfx2dd0gsb231cq000000002qg00000000thvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	60213	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:25 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:25 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ced16f83-c01e-008e-1322-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182925Z-17db6f7c8cfqkqk8bn4ck6f72000000000m00000000018q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	60217	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:26 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:26 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: e4dd17a3-501e-007b-21d7-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182926Z-17db6f7c8cfrbg6x0qcg5vwtus000000011g00000000xket x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:26 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	60215	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:26 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182926Z-17db6f7c8cfdpvbpevek8sv5g400000000pg00000000uxxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	60218	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:26 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:26 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182926Z-17db6f7c8cffjrz2m4352snqkw000000017g00000000202g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:26 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	60216	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:26 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182926Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000qg0000000077up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	60214	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:26 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182926Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000mg00000000gvmq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	60220	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:27 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182927Z-17db6f7c8cf7s6chrx36act2pg00000000w0000000018wrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	60219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:27 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182927Z-17db6f7c8cfdpvbpevek8sv5g400000000mg00000000yupc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	60221	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:27 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182927Z-17db6f7c8cfspvtq2pgqb2w5k000000000pg00000000e90f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	60222	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:27 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 0f93c021-e01e-0020-05fb-19de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182927Z-185b7d577bdt2k4f7f9nr1pp7s00000002dg000000011hgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	60223	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:27 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182927Z-17db6f7c8cfrbg6x0qcg5vwtus000000016000000000937u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	60224	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:27 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182927Z-17db6f7c8cfdpvbpevek8sv5g400000000v0000000000h0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	60227	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:28 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 69053910-001e-00ad-4022-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182928Z-17db6f7c8cfnqpbkckdefmqa4400000000vg000000006kau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	60226	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:28 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182928Z-17db6f7c8cf7s6chrx36act2pg00000000x0000000014vma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	60228	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:28 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:28 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182928Z-17db6f7c8cfspvtq2pgqb2w5k000000000m000000000e55q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	60229	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:28 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182928Z-17db6f7c8cfqxt4wrzg7st2fm800000000y000000000axdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	60231	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:28 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182928Z-17db6f7c8cfnqpbkckdefmqa4400000000sg00000000nydr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	60230	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:28 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182928Z-17db6f7c8cf58jztrd88d8aypg00000000fg00000000dbu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	60232	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: dac0d9b0-601e-0097-08fb-19f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182929Z-185b7d577bd8m52vbwet1cqbbw00000002z000000000hxdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	60233	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:29 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 95e0fd6e-c01e-00a1-5803-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182929Z-185b7d577bdd97twt8zr6y8zrg00000002x000000000ykrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	60234	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:29 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:29 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182929Z-17db6f7c8cfvzwz27u5rnq9kpc000000014000000000axpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:29 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	60235	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:29 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:29 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182929Z-17db6f7c8cfqkqk8bn4ck6f72000000000ng0000000019ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:29 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	60236	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:29 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182929Z-17db6f7c8cf58jztrd88d8aypg00000000qg0000000042p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	60237	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:29 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 935479ee-801e-008f-6f7b-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182929Z-185b7d577bdt2k4f7f9nr1pp7s00000002m0000000006b01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	62459	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:30 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: deafa783-901e-007b-5dcf-19ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182930Z-185b7d577bd8m52vbwet1cqbbw00000002v00000000154f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	62460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:30 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182930Z-17db6f7c8cf9t48t10xeshst8c00000000r000000000dunp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	62461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:30 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:30 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182930Z-17db6f7c8cf4g2pjavqhm24vp40000000120000000005h2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:30 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	62462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:30 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 077f2d3c-001e-00ad-33bb-19554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182930Z-185b7d577bd8m52vbwet1cqbbw000000030g00000000arec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	62464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:30 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a9a22b8f-501e-007b-21d3-195ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182930Z-185b7d577bdd97twt8zr6y8zrg0000000320000000002n1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	62465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:31 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182931Z-17db6f7c8cf9t48t10xeshst8c00000000pg00000000nrrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	62466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:31 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:31 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 7200aca2-601e-0002-6177-1aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182931Z-185b7d577bdd97twt8zr6y8zrg000000031g000000006csw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:31 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	62467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:31 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:31 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182931Z-17db6f7c8cfqkqk8bn4ck6f72000000000kg0000000012x6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:31 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	62468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:31 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182931Z-17db6f7c8cf7s6chrx36act2pg000000011g00000000d7ep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	62469	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:31 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182931Z-17db6f7c8cfnqpbkckdefmqa4400000000tg00000000g2cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	62470	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cfn5hsqv75v64wrqw00000000f00000000071k1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:32 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	62471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cf58jztrd88d8aypg00000000hg00000000czur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	62472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cfrbg6x0qcg5vwtus000000014000000000k0ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:32 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	62473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cfvzwz27u5rnq9kpc00000000zg000000010fw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	62474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cfnqpbkckdefmqa4400000000t000000000mdtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:32 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	62476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cfspvtq2pgqb2w5k000000000kg00000000df2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	62477	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:32 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182932Z-17db6f7c8cfqxt4wrzg7st2fm800000000x000000000hzbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	62478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:33 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182933Z-17db6f7c8cfbtxhfpq53x2ehdn00000000v0000000004kdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	62479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:33 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182933Z-17db6f7c8cf5mtxmr1c51513n000000000xg00000000tw0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	62480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:33 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182933Z-17db6f7c8cfqxt4wrzg7st2fm800000000xg00000000ebee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	62481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:33 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5d72a51a-801e-008f-7fe1-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182933Z-17db6f7c8cfrbg6x0qcg5vwtus0000000100000000016m73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	62482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:33 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 64ee2c34-901e-0048-70e2-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182933Z-17db6f7c8cf4g2pjavqhm24vp400000000w0000000016gb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	62485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: ebcaca14-a01e-006f-0cf9-1913cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-185b7d577bdwmw4ckbc4ywwmwg000000029g000000011tzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	62483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-17db6f7c8cf9t48t10xeshst8c00000000r000000000dv0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	62484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 401112aa-201e-005d-70d7-1aafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-17db6f7c8cfbtxhfpq53x2ehdn00000000s000000000kf23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	62486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-17db6f7c8cfkzc2r8tan3gsa7n00000000sg000000014p8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	62487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-17db6f7c8cfbtxhfpq53x2ehdn00000000ug000000007dw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	62490	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4440e13f-b01e-003e-016e-1a8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-185b7d577bdhgg84qrpnm2d6w000000002qg00000000u5vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	62488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-185b7d577bdfx2dd0gsb231cq000000002qg00000000tm2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:34 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	62489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:34 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182934Z-17db6f7c8cfbtxhfpq53x2ehdn00000000w00000000002p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:35 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	62491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:35 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182935Z-17db6f7c8cfbtxhfpq53x2ehdn00000000t000000000d2x6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	62493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:35 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 141663f2-e01e-001f-7437-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182935Z-185b7d577bdt2k4f7f9nr1pp7s00000002gg00000000mbkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	62492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:35 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:35 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 54149fda-b01e-0001-69e2-1a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182935Z-17db6f7c8cf58jztrd88d8aypg00000000fg00000000dc7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:35 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	62494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182935Z-17db6f7c8cf7s6chrx36act2pg000000013g0000000029v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	62495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:35 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182935Z-17db6f7c8cfrbg6x0qcg5vwtus000000010g0000000129tc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	62496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:36 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182936Z-17db6f7c8cfn5hsqv75v64wrqw00000000kg000000006u59 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	62497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:36 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182936Z-17db6f7c8cfspvtq2pgqb2w5k000000000r0000000007wxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	62498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:36 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 76375c60-d01e-0014-2f02-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182936Z-185b7d577bdfx2dd0gsb231cq000000002tg00000000anbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	62499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:36 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:36 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182936Z-17db6f7c8cffjrz2m4352snqkw000000010g0000000170kz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:36 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	62500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:36 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:36 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 747f5216-101e-000b-0608-1a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182936Z-185b7d577bdd97twt8zr6y8zrg00000002y000000000tppd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	62501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:37 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182937Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000gg00000000gauz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	62503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:37 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: ef53c767-f01e-0071-1df9-19431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182937Z-185b7d577bdhgg84qrpnm2d6w000000002tg00000000a0k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	62504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:37 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182937Z-17db6f7c8cfn5hsqv75v64wrqw00000000hg0000000069d1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	62502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:37 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182937Z-17db6f7c8cfqxt4wrzg7st2fm800000000yg0000000091yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	62505	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:37 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:37 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182937Z-17db6f7c8cfrbg6x0qcg5vwtus000000014g00000000fvep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:37 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	62506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:38 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a41636a0-e01e-0051-20e2-1a84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182938Z-17db6f7c8cf58jztrd88d8aypg00000000r0000000001axq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	62508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:38 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:38 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182938Z-17db6f7c8cfkzc2r8tan3gsa7n00000000xg00000000b1bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:38 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	62507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:38 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:38 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182938Z-17db6f7c8cfvzwz27u5rnq9kpc000000011g00000000s5ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:38 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	62509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:38 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:38 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182938Z-17db6f7c8cfdpvbpevek8sv5g400000000ng00000000zv71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:38 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	62511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:38 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:38 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182938Z-17db6f7c8cf58jztrd88d8aypg00000000g000000000dz98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:39 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	62510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:38 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:38 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182938Z-17db6f7c8cfrbg6x0qcg5vwtus000000013g00000000nssd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:39 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	62512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:39 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:39 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182939Z-17db6f7c8cfqxt4wrzg7st2fm800000000x000000000k06c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:39 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	62513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:39 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:39 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: ddfb06e3-401e-0016-1bf9-1953e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182939Z-185b7d577bd8m52vbwet1cqbbw000000030000000000d3hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:39 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	62514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:39 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 588a334f-a01e-0098-1acf-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182940Z-17db6f7c8cfqkqk8bn4ck6f72000000000cg00000000144k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	62515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:39 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182940Z-17db6f7c8cffjrz2m4352snqkw000000010g0000000170y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	62517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:40 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: eb55612a-501e-007b-0861-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182940Z-185b7d577bd8m52vbwet1cqbbw00000002vg000000011tga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	62516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:40 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182940Z-17db6f7c8cf4g2pjavqhm24vp400000000zg00000000m5sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	62519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:41 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182941Z-17db6f7c8cfqkqk8bn4ck6f72000000000m0000000001af8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	62518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:41 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182941Z-17db6f7c8cf7s6chrx36act2pg00000000z000000000twkr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	62520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:41 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182941Z-17db6f7c8cfrbg6x0qcg5vwtus00000001700000000043d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	62521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:41 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182941Z-17db6f7c8cfbtxhfpq53x2ehdn00000000q000000000uxyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	62523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:41 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:41 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: de2b4a30-201e-0071-54e2-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182941Z-17db6f7c8cfvzwz27u5rnq9kpc000000011000000000tdyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:42 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	62524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:42 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182942Z-17db6f7c8cf5mtxmr1c51513n0000000012000000000215y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:42 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	62525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:42 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:42 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f659b87d-a01e-0002-04d9-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182942Z-17db6f7c8cf5mtxmr1c51513n00000000120000000002165 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:42 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	62526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:42 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:42 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 6ab73692-101e-000b-4504-1a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182942Z-185b7d577bdwmw4ckbc4ywwmwg000000029g000000011uga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:42 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	62527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:42 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: db35775e-401e-0047-2d68-1a8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182942Z-185b7d577bdwmw4ckbc4ywwmwg00000002e0000000009r8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	62528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:42 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8d6d9129-701e-0001-43c0-1ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182942Z-17db6f7c8cfn5hsqv75v64wrqw00000000pg000000001b75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:43 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	62529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2e4ca8bc-501e-00a0-10d3-199d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182943Z-185b7d577bdhgg84qrpnm2d6w000000002qg00000000u6t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	62530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:43 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 10ce4294-301e-0020-2e67-1a6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182943Z-185b7d577bdfx2dd0gsb231cq000000002qg00000000tn0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	62531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:43 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 73142df5-301e-0052-1d1f-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182943Z-17db6f7c8cfbtxhfpq53x2ehdn00000000q000000000uy17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	62532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:43 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182943Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000g000000000g0hw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	62534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:44 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182944Z-17db6f7c8cf7s6chrx36act2pg000000013g000000002ah5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	62536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:44 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:44 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182944Z-17db6f7c8cf58jztrd88d8aypg00000000kg00000000degr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:44 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	62535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:44 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:44 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182944Z-17db6f7c8cfqkqk8bn4ck6f72000000000ng000000001b48 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:45 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	62537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:45 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182945Z-17db6f7c8cfnqpbkckdefmqa4400000000pg000000016xp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	62533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:45 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182945Z-17db6f7c8cfn5hsqv75v64wrqw00000000ng000000007a91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	62538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:45 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: d70285ad-d01e-0049-7f25-1ae7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182945Z-185b7d577bdd97twt8zr6y8zrg00000002yg00000000qafg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:45 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	62539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:45 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:45 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: d83281b5-601e-0050-3cd0-192c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182945Z-185b7d577bd8m52vbwet1cqbbw00000002w000000000z78s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:45 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	62540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:45 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:45 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182945Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000ng00000000h0uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:46 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	62541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:45 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 03f8bcf3-701e-0098-27e6-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182945Z-17db6f7c8cfrbg6x0qcg5vwtus0000000170000000004425 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	62542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:46 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ecaa5255-c01e-008d-52bf-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182946Z-17db6f7c8cfdpvbpevek8sv5g400000000q000000000srv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	62543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:46 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 083451f6-401e-0035-25c0-1a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182946Z-17db6f7c8cfrbg6x0qcg5vwtus000000012000000000up1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	62544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:46 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182946Z-17db6f7c8cfnqpbkckdefmqa4400000000sg00000000p07e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	62545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:46 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182946Z-17db6f7c8cfspvtq2pgqb2w5k000000000pg00000000ebnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	62546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:46 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7f97d057-d01e-0082-2d8c-1ae489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182946Z-185b7d577bd8m52vbwet1cqbbw000000030000000000d45a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	62547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:47 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182947Z-185b7d577bdd97twt8zr6y8zrg00000002ug00000001am9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	62548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:47 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: c08f385d-301e-0033-1fca-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182947Z-17db6f7c8cffjrz2m4352snqkw000000012000000000z52a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	62550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:48 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: da388a2e-601e-0097-49c9-19f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182948Z-185b7d577bdfx2dd0gsb231cq000000002ug000000006p15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	62549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:48 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182948Z-17db6f7c8cf7s6chrx36act2pg000000011g00000000d97q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	62551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:48 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 62bb5aab-101e-0034-27d7-1a96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182948Z-17db6f7c8cf9t48t10xeshst8c00000000h000000000v5r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	62553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:48 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:48 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 08565fb3-401e-0029-27c4-1a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182948Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000qg00000000796h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:48 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	62552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:48 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182948Z-17db6f7c8cffjrz2m4352snqkw000000010000000001679e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	62555	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:48 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ecb94678-501e-0035-51d8-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-17db6f7c8cfspvtq2pgqb2w5k000000000r0000000007yc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	62556	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e28c1875-001e-00ad-40e2-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-17db6f7c8cf5mtxmr1c51513n0000000010g000000009yav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	62554	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-185b7d577bdwmw4ckbc4ywwmwg00000002c000000000p2et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	62558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 4a4b6355-301e-0051-1bce-1a38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-17db6f7c8cfvzwz27u5rnq9kpc00000000yg000000016bb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	62557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 33c14fe4-301e-001f-2cee-1aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-17db6f7c8cfn5hsqv75v64wrqw00000000eg000000006phg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	62559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: d7b24c9e-901e-008f-50cf-1967a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-185b7d577bdhgg84qrpnm2d6w000000002s000000000m4m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	62561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:49 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-17db6f7c8cfvzwz27u5rnq9kpc000000012g00000000kk6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:49 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	62560	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:49 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:50 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182949Z-17db6f7c8cffjrz2m4352snqkw000000011g000000011pcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:50 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	62562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:50 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:50 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f766e345-d01e-0014-78e6-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182950Z-17db6f7c8cfbtxhfpq53x2ehdn00000000w00000000003fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:50 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	62563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:29:50 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 18:29:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:29:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: c43f9fe9-301e-003f-7c26-1a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T182950Z-185b7d577bdt2k4f7f9nr1pp7s00000002kg000000008n8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 18:29:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5928, Parent PID: 1360

General

Target ID:	0
Start time:	14:28:23
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3844, Parent PID: 5928

General

Target ID:	2
Start time:	14:28:26
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1996,i,10796994837371827411,2708721533245210862,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6292, Parent PID: 1360

General

Target ID:	3
Start time:	14:28:27
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5928_1378858898\sets.json

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://darwynnfulfillment.freshdesk.com/register/Xo7ehwav33TcneRvnq7