Edit tour

Windows Analysis Report
http://telegiraum.club/

Overview

General Information

Sample URL:	http://telegiraum.club/
Analysis ID:	1532707
Tags:	openphish
Infos:

Detection

Telegram Phisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected phishing page (G)

Antivirus / Scanner detection for submitted sample

Yara detected Telegram Phisher

Detected clear text password fields (password is not hidden)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,1938976502007364758,12421088361425760724,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://telegiraum.club/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_TelegramPhisher	Yara detected Telegram Phisher	Joe Security
0.0.pages.csv	JoeSecurity_TelegramPhisher	Yara detected Telegram Phisher	Joe Security
0.2.pages.csv	JoeSecurity_TelegramPhisher	Yara detected Telegram Phisher	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://telegiraum.club/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: http://telegiraum.club/

LLM: Score: 9 Reasons: The legitimate domain for Telegram is telegram.org., The provided URL 'telegiraum.club' does not match the legitimate domain., The URL contains a misspelling of 'Telegram' as 'telegiraum', which is a common phishing tactic., The use of the '.club' domain extension is unusual for a well-known brand like Telegram, which typically uses '.org'., There is no indication that 'telegiraum.club' is associated with Telegram. DOM: 0.0.pages.csv

AI detected phishing page (G)

Source: http://telegiraum.club/

LLM: Score: 10 Reasons: The URL "telegiraum.club" is highly suspicious. The domain "telegiraum.club" is not related to the brand "Telegram". The correct domain is "telegram.org". The use of a similar-sounding domain name is a common phishing tactic to deceive users., The provided URL uses an unknown top-level domain ".club", which is often used for phishing websites., The input fields " (Country)", " (Phone Number)", " (Verification Code)", and " (Password)" suggest a login or account creation page. This is a common target for phishing attacks, aiming to steal user credentials. DOM: 0.0.pages.csv

Yara detected Telegram Phisher

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: http://telegiraum.club/

HTTP Parser: <input type="text"... for password input

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/htmlContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "803a3365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:24 GMTContent-Length: 31950Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 4b d3 3e 49 7a de b5 e7 53 b4 67 23 3b f0 5f 9d 95 e7 1c 69 14 8c 5a 6e 83 43 47 4b 83 64 6d 88 cc 3a cc 34 ee 99 1e 75 b7 3c 1a 13 2c 59 40 70 dc 40 04 3b 76 86 95 03 16 10 04 c6 5f c6 b2 61 c5 57 e0 ba fe f9 7b 14 72 60 c3 1b 3e 44 c0 6b de 45 5d 6f d6 93 95 95 95 95 79 9f f2 be eb fe e5 bf f0 6b bf f5 d9 ef fd 8d df fe 2b 9f fc e8 db 1f 7f f9 2b bf ec e3 27 5f ce 9f fc f0 7b df f9 db 3f fa f0 d9 6f 7e 47 a7 ee 79 fd ca bf f6 89 fe 7e f9 c7 f7 b7 f3 93 f3 47 f3 eb 6f ee 6f bf f7 9d 3f fe f6 f9 d0 bf c3 4f df 7e f1 ed 97 f7 af fc de fd e5 fd c3 af e7 8f 3f f9 fd 7b fd f2 a7 fb dc 9f bb f4 a7 5f 7f f5 d3 fb eb 6f 7f fe bd ef 7c f5 c3 ef 7e fc f5 3b 9f 9c 5f fd e4 db fb 27 6a ee cf 5f fb 9d 7f f2 55 df fe ec 8b 6f bf bd bf 7e fb a5 3f 99 3f be bf f7 9d bf 79 ff fc 67 5f 7d 7d 7d f3 ff 70 c5 5f f8 f0 e1 1f bb ec ba bf 39 bf fe e2 a7 df 7e f1 d5 4f fe dc 95 7f fa 1f fc 9d 7f f8 5f fe dd 3f fd 4f fe eb 3f fd 7b ff ed 9f fe e7 ff e9 9f fe 67 7f f7 4f ff c7 ff fe 1f fc 4f ff d1 3f fa 9f ff fe ff f1 bf fc c7 ff f0 7f fd 1f fe f7 ff ea ef ec 5f ff c1 df ff 6f fe b7 ff ee 3f fc 47 7f ef bf f8 ce 27 9f fe b9 4e 7d fc ef 93 7f 7c 2c fe fc ad f8 fd 9f eb 86 1f db f8 f4 57 3e f9 f0 81 1b af f9 cd fd c9 8f be be 9f ef 7d e7 d3 d7 f3 7e f9 c5 4f fe e6 27 5f df 5f 7e ef 3b 5f 9c 7e c4 6f 7f fe 53 3d f5 17 3f 9e 3f bc 3f fd 93 0f fb dc be e4 17 3f 7d e6 df f2 89 5f d4 e1 ff 7a f9 4f bf be f5 db 4f ee f3 db d7 05 3f fa f6 db 9f 7e f3 dd 4f 3f 7d f4 10 df fc e2 0f bf fa ea 87 5f de f3 a7 5f 7c f3 8b e7 57 3f fe 67 b8 fe 9b 6f e7 b7 5f 9c 1f 2f fe e4 fc fa ab 6f be f9 ea eb 2f 7e f8 c5 4f be f7 9d 57 5b df 7c fb f3 2f 6f 1e e0 db fb 4f be fd f4 fc e6 9b ef fc ca bf e1 cb 3f 3c f3 bc ff 3d fe fb f1 17 5f fe fc bb bf f0 eb f3 db af 7e e1 97 3e 9e fa 78 e1 77 7f f2 d5 d7 3f 9e 5f ee 33 3f bb bf f8 e1 8f be fd ee 11 c2 2e 5f 5f 7c f3 d3 2f e7 cf bf fb cd cf e6 4f 7f e9 9b af cf ef fe f1 d7 5f fe c5 7f 6a ff 3e fd e6 d3 2f d5 fa a7 7f 2b e6 4f 7f b7 fe 71 ff 59 fe d5 df f8 c1 ef fd f6 bf f9 a3 14 be ff 83 2f 3e fc d1 6f 7e f1 07 3f 6c f7 0f c2 2f fe ec ab e7 89 7f e9 93 c7 77 fe f6 2f fe c2 c7 e2 2f fc a5 5f fa e3 9f 68 84 af fb c3 d7 5a 82 f7 77 7f f0 af 07 f5 e3 43 88 df ff fc 2f 7f a2 42 0a 19 ec 1b e3 30 1e 7f 45 95 8e bf 32 3e df 85 cf a3 0a 9f 7f 2c c4 10 c3 c6 ef 87 0f 3a fc 2a 85 5f 53 e1 b3 fd cb 71 a4 8f f8 59 55 8d cf da c7 cb be df 62 f8 f0 fd f6 f9 e7 bf f4 ef ff bf 6c 0c ff e0 33 c6 f0 77 de 3c 82 c1 23 18 f6 78 84 23 1d 1b 4b fc a0 c3 c7 47 0f f1 57 7f 55 63 fc ab 9f ed c2 67 75 e3 af 7d 1f fc ec ff 6e ec a3 9b 8f a1 32 dc 2d 33 c2 9f ed c1 8d 71 e3 38 c0 3d d8 fa 01 2c c6 cf 79 5d 9f 7f fe f9 af fd f3 0d 79 fa 17 32 e4 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "803a3365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:24 GMTContent-Length: 26177Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 7b 8f 23 b9 91 20 fe ff 7c 0a ad 07 8d ea f6 94 d4 ca 94 52 8f 1a f4 60 6d 63 17 b7 c0 8c ff f0 dc 02 07 cc cd 01 29 65 aa 24 b7 5e 97 52 75 a9 67 31 bf cf fe e3 9b 41 32 f8 c8 2c a9 ba cf de f5 da ad ca 64 3c 18 0c 06 19 41 66 c4 fb 3f fe cb 37 bd 3f f6 fe 7c 38 9c 4f e7 a6 3c f6 3e 8d 07 c5 60 d8 7b bb 3e 9f 8f a7 87 f7 ef 1f eb f3 42 be 1c 2c 0f bb f7 ef 68 fb bf 1c 8e 9f 9b cd e3 fa dc cb 87 59 d6 cf 87 f9 b0 f7 3f d7 35 c0 f3 a7 a7 f3 fa d0 9c bc 8d 9f 37 e7 73 dd dc f7 fe 63 bf 1c d0 46 3f 6e 96 f5 fe 54 57 bd a7 7d 55 37 bd 9f fe e3 7f 02 1e 36 e7 f5 d3 82 51 3f 3f 2f 4e ef 15 43 ef 17 db c3 e2 fd ae 3c 11 54 ef 7f fc 8f bf fc db 5f 7f fe 37 ca df fb 6f be 79 68 48 a3 de 7f 7d d3 eb f5 fb 8b ed 53 fd d0 fb 76 38 9c 2e 56 ab ef d9 a3 cd be da 3c 1e c8 c3 c9 24 1b ae 72 fe f0 f8 d4 1c b7 b4 e5 64 35 ce 97 99 78 b8 d9 7f 24 8f ea d9 a8 9e 2d f9 a3 a6 ae c8 93 6a 39 2a c6 05 7f 72 68 ca fd 23 85 5c 55 d3 3a 1b f3 87 9f eb ed f6 f0 4c 1f ae 96 d9 70 ca 1f 3e 36 75 bd 27 cf f2 59 39 95 d0 e7 ba dc d2 47 c3 e5 7c 2e 9a 2d 3f 97 b4 55 36 2d f3 c5 8c 3f 7a 5e 6f ce 8c 84 ec c3 63 53 7e a6 cc 2e a7 c5 b4 d2 8f fa 55 d9 50 8e 47 e3 51 39 1e 8a 4e 34 9b 5d d9 7c b6 84 70 aa 97 87 7d c5 9f 43 2c a7 a7 e5 b2 3e 9d 2c 2e 37 fb d5 c1 66 a9 6c f6 9b fd a3 d5 c5 8a ca a2 b1 24 b4 a5 0a 40 1b ce 56 f3 55 29 1b 3a 8c 2e 9a ba fc 78 3c 6c f6 e7 fe 85 30 e0 3e 3d ed 1e 7a c5 74 72 bc 38 6f 76 64 50 a6 93 19 f2 66 4b 38 9c cf 73 e4 cd 85 c8 3d cb 87 43 f9 6a 75 20 0f 57 e5 6e b3 fd dc 3f 95 fb 13 11 51 b3 59 3d f4 fa e5 91 68 46 ff f4 99 68 da ee be b7 d8 12 a5 d8 95 4b fe 37 05 ba ef dd fd 5c 3f 1e ea de 7f fe c7 dd 3d 41 d5 eb 35 87 c5 e1 7c 20 cf ff 47 bd fd 54 9f 37 cb b2 f7 d7 fa a9 be bb ef 95 cd a6 dc 92 17 7f 25 ef 7b 3f 13 2a e4 99 26 c6 a1 ef fe 44 09 92 a9 b3 3d 34 bd 7f db 1d fe be b9 03 24 90 27 3f 7f de 2d 0e db 3b 89 16 02 ba 5d db 1d f6 87 d3 b1 5c 12 75 3a ad e8 1f 44 a5 1f 9f b6 25 99 8f bb 7a bf 25 5c 93 87 e5 92 fc 4b 14 e4 74 d8 96 27 c1 d5 8f 9b 45 dd 94 e7 cd 61 df fb 89 80 51 72 7f 39 3c 35 1b 32 63 ff 5a 3f df 31 38 8e f9 fb 6f 7e ff e6 9b 3f de 7f f3 f0 50 ae e8 44 27 3f 16 f5 ea d0 d4 6c 4e 2e 0e 97 fe 69 f3 1b d3 9d c5 a1 21 33 be 4f 1e 31 98 f5 79 b7 65 6d 00 c3 0f 40 3e b4 37 44 fc 75 7f 5d 73 95 ca 06 19 d7 b1 e7 7a f1 71 73 26 b3 e9 72 a6 c8 eb 7e 59 fd fd e9 44 5b 0c 87 6f 8c 16 e5 b1 bf 26 c0 4c 27 fb 4b 2a aa 87 1e b1 27 7b c2 79 53 ef cf 8c 8f b2 21 63 b6 ad ef bf 29 4f 9b 8a fc b3 da 3c 2e cb 23 ed 3a fb fd d4 d0 67 c4 c6 d0 be ad eb b2 62 ff 3e 36 87 a7 e3 fd 37 bb 72 43 5a ed cb 4f f7 df 90 39 c6 c4 45 7b 54 6d 4e c7 2d 9d b3 c4 6c 2d 3f 32 2a 8b 43 f5 99 bd 23 d3 f3 71 b3 17 1a 6f 74 dd d2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "803a3365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:24 GMTContent-Length: 5088Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 5c 4d 6f ec 38 76 dd f7 af a8 60 30 78 af 07 2e 3f b3 5c 9f 1e 24 e8 20 c0 00 03 74 90 45 67 99 0d 25 51 25 3e 4b a2 1e 25 d9 ae 0e e6 bf 87 94 ea e3 90 55 75 e4 01 7a 93 5e f4 83 a5 73 29 7e 1c 5e 5e 5e 1e d6 b7 bf fc cb 4f b3 bf cc 66 7f 33 75 37 fb f7 77 d5 9a 4a cd 96 8f 8b c7 a7 59 72 98 fd 92 c9 37 b5 97 75 76 98 cd 67 45 d7 35 2f df be e5 0e 29 47 e0 a3 36 ee f9 2f f0 64 28 eb 57 9d aa ba 55 f7 4c be 95 c7 f7 5f fd 47 5f 66 bf fd fd d7 d9 7f fd ed d7 99 78 14 0f b3 ff f8 ed b7 97 d9 7f fe fd bf 4f 85 fc ec 4a fc f6 d3 f0 89 79 2e 53 35 fb df 9f 66 b3 e3 5f 95 2e 0f 2f b3 2f be 94 63 cd bf fc d5 bd 6d 6d fa 32 eb 6d f9 f5 cb e3 e3 f0 e9 16 2b 30 7f 57 89 ff f3 51 99 ee cb cf ff 2c de 7d da 56 b2 fb fa 45 55 89 ca 32 95 cd 4d a3 ea ee d0 a8 2f 3f 3f b8 b2 66 9f 28 e8 dd e4 39 94 34 fe f9 59 e3 ae 43 db ce f6 ea 9f fb 78 fb b6 07 fb e1 af bf 9e 7a f4 5d e9 7d e1 06 a4 f6 6f cb f3 e3 b6 3b 94 ea f2 f4 1f 3f fd f4 98 cb 61 1c 32 dd 36 a5 74 63 a0 eb 52 d7 6a 9e 94 26 7d 3d d9 9d 2c a2 7f c4 b2 f9 f8 26 66 30 68 97 0f e9 df 95 2f ab 50 56 77 fe 69 a7 3e ba b9 55 75 e6 1e d4 fb 97 99 ec 3b e3 9f fb d6 bc 6a 47 81 c1 aa 32 a6 2b c6 f7 75 a7 65 a9 65 ab b2 01 56 99 df e7 a6 fd b8 c2 ed ad 3c b4 a9 2c d5 a9 35 f3 72 7f 21 d6 58 0d f1 f8 7c fc 4f 55 be b0 a1 81 c5 b1 87 9e 1e 37 ab f1 f1 9b b2 9d 76 45 cd dd 77 f7 f5 cb 6c 2e 56 7f 3e 97 ba f8 88 4b 5d 78 ab e3 db e7 ab b7 cf f0 76 79 f5 76 09 6f 57 57 6f 57 f0 36 7f 1f de be eb ac 2b 7c 4b 16 db d5 46 2c 17 bb b1 ca 43 af 1e ab eb e6 58 a7 ec d9 b0 2f 07 c3 46 66 99 eb a8 79 a9 72 df 58 6f 54 49 bb d7 f5 f1 c9 e2 d1 95 36 94 79 ea 9b f6 48 93 b9 67 a3 1f f9 5a 61 a1 ff e6 20 63 c9 a6 d5 9d 36 ee cb 56 95 b2 d3 6f 30 04 31 42 26 ad 29 fb 6e e0 c7 f8 dd 79 fc e1 63 0b e3 c7 9d 69 fc 18 45 0f ef 37 bb d4 c0 81 e3 a7 c4 e3 d8 69 db 35 74 6c 62 ac e3 22 f6 91 ff 8e 1b 54 ff ff d5 f0 8f 38 12 63 84 be cc 5c 1b 74 e6 9e 3f 6d dd eb 3f 29 a5 2e 2f e7 56 66 ba 6f 87 aa 9e 3e d2 f4 65 39 b7 9e 65 e3 00 97 46 ba da 0c 0f 00 e0 eb 88 ef fd df a7 4a 46 88 e3 c0 d9 13 71 81 63 f1 c7 82 31 0e 90 f3 b6 d1 f5 80 39 4d 3d 59 6b e7 41 86 71 3a bd 5e b4 6e ee e6 ba d6 9d 1a 66 8b b4 be a9 9f 04 ba ef fc 72 2a fb 55 1d 72 2b 2b d5 ce 2e 5f 76 25 3d fd 79 a8 c1 a5 0e 9d 95 75 eb 5d 99 eb 20 d3 c9 4e 7d 7d ca d4 7e f0 67 6e b8 ef bf fc 87 2f 4d 3c 7d a2 bc e7 d5 8e 95 08 af ff 31 b4 e0 ff 6d cd fd 18 8f af e6 bb a7 91 59 ba ec 3c 7f 1b 6b f6 3a 7b c9 3e dc 30 ee d5 b9 a4 c7 4a a7 d6 b4 26 ef 1e 13 d9 ea 74 78 fb 75 28 c2 8d f5 bf 8a 9f d1 4f 5f 7f 7f 77 6e d2 bc 6a e9 fb fb ef c2 6a 8b ed 1f 51 ef c5 44 bd dd 57 78 c5 01 40 5e 86 55 5f 6c fe 88 aa 3f 4f 54 dd 7d 85 57 1d 00 e4 e5 69 89 29 75
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "803a3365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 13209Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc 7d 09 73 db b8 d2 e0 5f 91 58 29 3d b2 8c 68 ed f7 be af 6a 57 0a 46 e5 43 71 9c f1 35 b6 92 49 ac a7 d5 50 14 24 31 a6 48 85 87 6d 59 e6 7f df 6e 5c 04 0f 27 79 6f bf 3d a6 6a 22 e2 6e 34 fa 42 a3 01 5b 59 c2 5a 49 1a fb 5e 6a f5 ed 84 05 8b ee 23 9b 6d 5c ef fe 78 95 85 f7 ee fc 61 ba 89 e2 d4 9d 66 3e fd 61 e9 cb cb 78 e2 74 37 59 b2 b2 c7 e3 ff f8 fb ff 98 90 dd 7f fe a3 67 9f 30 32 67 64 c4 1c fa db ce 8b c2 24 6d 6d 18 b5 b2 70 ce 16 7e c8 e6 56 9b a6 db 0d 8b 16 ad 65 10 cd dc 60 b4 f2 93 4e a7 f8 26 87 cd b5 1f fd 70 1e 3d 76 3a e2 97 7c 68 ae 85 00 77 3a 4d 25 7f 46 f1 3d 8b 4f f9 38 b7 5e b4 61 9d 0e 56 6e f9 00 a1 1b 7a 3f a8 42 8e 19 dd b0 97 97 d7 e7 a0 e0 7f 79 39 84 7a 1f 18 59 33 ba c8 42 2f f5 a3 d0 7e 43 ba dd 6e c8 9c 9d bf b0 d7 ac 9b c6 6e 98 04 6e 0a 19 02 3b 1f a9 99 0b d5 a1 6e ff 0d fd 38 de 9f c0 27 fc 1e 4c f2 80 a5 ad 5b 1a 41 29 e6 be e9 c6 ee 23 7c 38 fd 45 14 db 58 f6 91 1e f4 3f be 7b d3 0d 58 b8 4c 57 fd 8f 7b 7b ce ed 1e 0d d9 f8 e3 db 83 c9 1e 6f f7 51 b5 fb 08 ed 62 96 66 71 d8 ba cd fb 0a cc 56 24 87 de 89 32 ab 67 51 0a 3d 74 bd 95 1b 1f a6 f6 be 33 78 d3 4d b2 19 12 4e b8 b4 8d d9 61 1b 05 c7 2d 3d 20 08 cb 6d 01 cb ed de 1e 41 78 60 f6 d6 3f ff 29 3a 45 18 20 af cf 02 20 45 2c e0 83 bd 19 df 4e 1c 05 59 3f 5d c5 d1 63 2b 64 8f ad 61 1c 43 f7 7f 7d 0a 53 16 af fd 10 90 34 6f bd 09 22 cf 0d fc 67 d6 5a b3 d4 9d bb a9 db 9a 41 d6 3d 2c 67 cb 7a b3 0b 59 6e 75 ff 72 72 01 de de 81 d3 7b 93 1f b3 ae 6e 05 28 07 0a b5 ff f3 bf ff c3 c9 09 fc db b3 91 5a db 7a 56 7a 71 42 ca ba 1b 16 c3 fc d6 48 24 05 ba 7c fb dc d9 85 9d 4e d8 5d bb f1 bd fa 85 cc 5c 57 89 ed 73 b2 51 95 98 9b 64 31 33 3e 79 61 ee db d6 5d 14 32 cb e9 8b f1 3c 18 6f 3a c5 ac 69 b2 5d cf a2 60 ba 89 81 e6 9e 80 fa a6 d3 67 23 7b 6a 15 b0 64 08 8b 44 9c b7 77 9e 8b ae 16 b4 bd 0f 58 65 e3 cc b6 00 7e 8f 9d 64 9b c0 f7 00 7d d8 fd f1 8a 79 f7 96 33 e9 03 fa 59 17 73 38 81 2e 60 20 d5 6f 41 e5 a2 02 00 a6 06 77 aa ab c3 67 d1 72 83 98 b9 f3 6d 2b 88 dc 39 9b 77 2d 4d 68 a2 03 4e c6 53 6a 73 64 7b 81 9b 24 ad 73 81 e7 38 f3 52 e8 25 25 91 b3 4b 41 08 74 a7 1b 37 66 61 4a 53 22 92 a1 0b 2c 15 0d a2 2e 7e 70 56 c4 8f 39 10 ce bb 38 8a d2 df 2c 59 6f 13 03 db c6 a9 cf 12 1a 75 3a 51 b7 48 bf bc ec 72 59 09 f1 78 c2 02 b6 04 5c 50 9c c3 c8 c6 02 62 8e dc e9 98 a9 72 1b 80 32 07 a1 91 fa 5e 0b e6 00 dd e3 e4 ae dd d4 5b b1 b9 cd d1 c8 ba d7 71 b4 f6 13 d6 86 05 10 93 3f 7c 84 9e 64 6e 33 fa ba df 92 d6 ca 4d 5a 73 96 32 0f 89 3c 5d b9 69 ab da b6 f5 97 2d 44 e0 8b 90 39 8e 1a ea 2f de 78 c6 18 f0 f2 03 8b 1f 63 3f 4d 59 d8 fd 67 78 11 01 35 04 fe 3d 0b b6 2d cf 45 e9 ef 27 a2 6f b7 a5 3a dd 44 c1 76 e1 07 41 d1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:05:12 GMTAccept-Ranges: bytesETag: "084bd7dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 216842Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac bd 8b 7f d3 c6 b2 38 fe af 38 be 7c 5c e9 66 e3 da e6 51 6a 47 f1 a5 10 38 e9 81 40 09 7d 50 d7 37 28 f6 26 51 91 a5 54 92 03 69 ec f3 b7 ff 66 66 5f b3 b2 1c e8 ef 7b 3f e7 94 c8 ab d5 3e 67 67 e7 3d 41 29 d3 f3 ee 27 79 76 15 cf 3e 3e bd 5c 66 1f e3 f9 f5 e9 55 5e 54 f1 e9 32 89 ee 7c bb 5a 4d a6 61 f7 6a 59 5e 06 93 49 ff bb ef a7 e2 f6 bb 07 0f 86 c1 b5 14 b9 14 bf 84 d1 c1 6d 7b 59 ca 56 59 15 c9 ac 6a 8f ce 97 d9 ac 4a f2 ac f5 2e a8 c2 db 42 56 cb 22 6b 9b c2 76 14 55 37 57 32 3f 6f 55 eb 54 56 ad 4f d1 4e 7f 34 cb b3 b2 6a bd 8c 6e df 14 f9 22 29 e5 f0 3a 4f e6 ad 9e 28 a1 02 b4 fc 4c 5e 15 72 16 57 72 7e 72 93 cd 2e 8b 3c cb 97 e5 61 51 e4 c5 bf e2 6c 9e 26 d9 05 76 94 9c e3 bf aa a9 2c ca e4 a7 16 55 a1 c6 f3 54 76 3f c5 45 16 b4 9f 1d be 79 7b f8 f4 c9 bb c3 67 3b ad b7 9f 7f 3c 69 7d 8a cb 16 f6 53 e5 d8 55 6b 6e fb 6a 95 ae b3 96 c4 a6 5a 97 ba bb d6 99 bc 8c af 13 28 39 bb 69 cd f2 b9 6c c5 d5 b0 f5 47 d6 de cd ba 65 05 6b 18 ae 65 0a 8d 7d ea 74 4c ef 69 7e 11 b4 b1 c3 61 eb 07 a8 80 dd c5 d0 4c 55 c9 42 37 6e da ec b6 de 41 3f 1f 5b 37 f9 b2 db da bf df 0e 47 9f a2 6a 2d 2e be 7a 2d cc 9a b7 3e ad d7 6e 33 ee e1 ea c0 44 df 25 0b 99 2f ab 20 c0 7d ab a0 81 4f b0 13 a2 17 ae d5 ca fd 16 dd ce d2 bc 94 f3 e1 4e 4f 64 f2 73 85 9f ad 05 0d 51 af f2 cb ee 57 8d 23 d4 8d 8f b0 e7 b5 98 e5 8b 2b d8 70 09 c3 5b af c5 f3 e8 49 51 c4 37 dd a4 a4 bf ab 55 50 45 07 55 a7 d3 ce 96 8b 33 59 30 28 e9 a6 32 bb a8 2e 43 37 93 bf 1c 58 b5 b2 65 9a ee 40 65 f8 32 3f fb 53 02 f8 31 f8 52 33 7a 1d a9 b9 da ef ab 20 b3 df d3 88 bb b3 38 4d 83 ea 32 29 43 81 ff 76 17 b2 2c e3 0b 19 65 e3 0f f7 6e 33 3d 82 b5 da a7 b2 95 cf 66 cb a2 00 00 99 2f 0b 04 86 65 56 2e cf ca 59 91 5c 61 f3 c3 3f 32 fc 66 11 5f 05 81 14 09 f4 0c 6d 24 bb fd 75 d8 ba 77 2b bb 55 7e 52 e1 57 41 b8 fe 10 76 ff cc 13 80 c9 3f b2 56 ab 0d bf 87 ed b6 ea 3f 8b 17 32 6a ff ec b5 4b 23 d5 ef d5 40 a2 8c 7e ad f5 54 aa ee 55 91 57 39 ce 3e 7a 4d 6b d1 9d 15 12 76 28 50 93 b4 6f 61 92 eb 30 08 47 b3 34 2e cb d6 1b 75 64 8a e5 ac 82 1d 86 95 a1 1e 14 0c c0 d9 54 1d 9e 5e c5 85 cc aa d7 c5 1b fa 0b 5d c3 ba eb 57 7c 90 fa 45 d6 e9 04 ea 25 36 6a e7 71 26 23 00 2a f5 62 c9 0a b3 70 cd 7e 02 80 20 62 c8 46 78 a0 dd 58 42 35 cd 11 bc bb ad 0f 67 28 45 bd a7 61 22 78 1f c3 42 f8 03 1d 96 eb 08 5b af f5 e2 06 f8 cf 66 2c 5b 09 2c 62 9c cd 10 f2 de 84 b2 5b c8 45 7e 2d 15 50 8d 08 19 40 47 1a 5a 65 78 0e 4b 8d 93 cc a3 de 28 df 97 1a c2 46 bb bb 79 28 27 f9 d4 ff 1a 3e 7c 17 14 21 9c 3d bb ac 7c f5 14 ae 0c 47 55 71 73 cb 41 79 0d a7 73 76 19 e4 e1 6d 16 e5 7c 78 af c7 57 41 ae 61 28 1c 42 77 eb 35 74 f1 3c 28 43 b5 f2 79 b4 d7 17 71 54 9a 51 e1 60 71 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "0d1cb65dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 40582Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 69 77 db 46 d2 28 fc 3d bf 02 cc f8 19 00 16 45 4b f6 64 ee 0d bd e8 38 b2 93 78 26 ce 62 39 93 64 28 26 07 22 9b 12 62 0a 60 00 50 4b 2c cd 6f 7f bb aa 7a 5f 40 ca c9 33 e7 be 3c c7 16 09 f4 de d5 d5 b5 d7 83 fb 83 e4 d7 ef d6 ac b9 4e 2e 1e 8d 3e 19 ed 27 37 49 36 cb 93 7f 1c 25 9f d7 eb 6a 5e 74 65 5d 25 45 35 4f ea ee 8c 35 c9 ac ae ba a6 3c 59 77 75 d3 f2 a2 bf fe 06 55 47 75 73 fa 60 59 ce 58 d5 b2 e4 fe 83 8f 06 d9 62 5d cd b0 66 c6 86 49 97 27 ef 3f 4a 92 74 cd df b6 bc f6 ac 4b 1f c3 ef fa e4 57 c6 bf 27 4f 9f 26 dd f5 8a d5 8b e4 bc 9e af 97 2c f9 eb 5f e3 2f 47 ec 6a 55 37 5d cb 1b 48 92 83 24 b3 9f 26 4f 13 36 9a d7 b3 f5 39 ab 3a 2c 42 c5 3a 18 c7 60 2f 57 8f c6 89 31 44 1a 9f fe 94 8b 24 1b e8 76 72 eb 65 92 74 67 4d 7d 99 54 ec 32 79 d9 34 75 93 a5 62 01 1b f6 db ba 6c 58 9b 14 c9 65 59 cd 79 99 cb b2 3b e3 bf 64 43 69 fe d8 6a aa 61 dd ba a9 60 70 d6 8b 5b ea 70 2c 5e dc e6 59 ca 77 82 2d ca 8a cd d3 64 a0 16 44 74 72 20 bf f0 0a 67 65 3b 34 66 76 38 4c 58 78 f1 2f 8a 26 e9 f8 6a 4d a6 43 ec ac e1 df bf c1 25 1f 9d b2 ee db a6 ee 6a e8 e5 9b 05 bd 86 85 ed 46 2d ec 31 3d 38 c5 07 8b 65 21 57 f9 20 be a0 72 9a 58 7c 34 2b 96 4b 6b c2 b7 1f 6d dc 12 d5 02 07 bf 19 6f a3 58 ad 96 d7 19 1f 7b 62 35 44 43 5b e3 d0 56 eb f6 8c 7e 97 f8 9b 2f 11 bb 92 d3 a9 f8 a3 f7 a2 78 cd bf 57 a3 ae 3e e2 8b 53 9d d2 b3 0b 7c 76 56 b4 df 5c 56 7c 2d 56 ac e9 ae e9 4d c1 df 5c 38 a5 97 fc 59 41 f3 a2 25 cc e9 f9 b5 d1 cb 39 ff 1e 9c 9e 98 5a 2a 5f 9a 10 4f 27 a1 5a 9f 9f b0 c6 dc 78 36 aa ea 39 7b cb 7f d0 e4 45 1f 57 1b fa a8 d6 cb 25 b4 82 cd 32 de 0f 1c 16 82 1d ab 9d 97 bc 9d 43 05 fd f4 6c 06 73 c1 fe c7 fc 1c 0d 93 b6 99 d1 97 8a ef 08 93 5f 5f e3 61 84 5f c9 2d 34 a9 46 73 82 78 80 17 91 83 02 f8 6b 86 62 7c a5 fc 02 7b 91 c1 e6 54 c9 cd 4d f2 32 1f cd 1a 56 74 ec e5 92 c1 48 b2 b4 9d 35 e5 4a 1d 23 38 a6 59 56 8f 3a 76 05 a0 cc 72 40 35 f2 b0 2e ea 26 c9 9a a4 ac 92 99 3e bf 19 c2 c2 a4 99 42 f3 19 82 fa f3 8e f0 19 2e 8a fd 24 6b f2 3c e7 8f 0d 40 ac 47 ad 55 60 98 94 62 30 1c 5c 58 31 07 c8 64 d5 fc f0 ac 5c ce b3 3a 1f ad 8a 86 0f fc 6b be 5b a3 86 9d d7 17 4c be 81 4a b7 e6 0a 5d ea 0d 33 b7 0b f6 48 9d 30 96 ec 24 69 aa 8e 4b 00 47 32 98 58 18 96 54 2b d5 a4 96 87 10 d7 41 36 a3 da 95 35 e4 18 61 af 16 7c e1 52 bc 20 52 da ac 23 1b d8 14 96 37 27 c0 31 e4 d1 68 51 f1 b3 57 76 54 44 c0 99 05 1b 2b 3d 73 89 95 06 03 02 fd 25 ab 4e bb b3 14 76 91 80 76 44 4f 24 bc 00 a8 5c 2a 64 22 ba cd c4 cb c1 39 34 ac b6 6f 70 65 fd cc d2 a2 69 8a eb 14 8f 01 80 9b da e5 3d 7c d4 99 8f 32 75 08 f5 82 76 30 a0 bd e4 09 7d e9 92 dd 64 1f c7 29 20 50 ed 70 06 4b c0 c7 79 34 5a 49 ac 9a 3c c5 22 72 b9 e8 12 e5 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "6356365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 772Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 b6 ee 7c 76 f4 8b 3f 5a 37 79 da b4 75 31 6d 3f 3a bc cc ea 34 1f 15 9f fd e2 5f 32 fa fd e9 9f c3 f3 f5 72 da 16 d5 32 5d 6e e5 77 7e 31 be ad 3e fb fd bf 97 7f ff b0 38 df ba ac 8a 59 ba f3 bb 7e f6 59 75 a7 ce db 75 bd 4c ab 71 fe 6e 55 d5 6d c3 70 6a 6e f9 d9 2f d6 cf 1e fd e2 5f f2 4b 0e b5 61 41 5f 8c a7 59 59 6e d5 e6 95 51 3d 72 bf 2f ef b8 3f 7e c9 72 bc f8 ac 18 e5 9f 7d ef fb a3 e5 f8 cb cf b6 2a 6a ba 1e 95 c0 9d b0 f8 5d 6b c1 ab f9 6c f7 ee ce e1 79 55 6f 65 9f ed 1c 66 8f f3 71 99 2f 2f da f9 61 f6 c9 27 77 7e 31 3e a7 56 df e3 37 bf ff 59 fe bd ec fb a3 e9 67 bf eb ce e8 9c 1a 9f 3f ae 4d e3 73 6a bc f5 bb ee fe c2 f2 67 7e a6 39 fa ac bc f3 0b 7f e1 97 93 9f ce a7 ed f8 6d 7e dd 6c 51 f7 77 c6 f9 65 5e 5f 6f cd 3f 3b a2 bf be 37 ff fe 56 fd bd f3 ef df b9 f3 7b d4 e3 66 55 16 d3 7c eb 7c 7b 7b b4 7b e7 d1 16 81 df 1d 95 8f 9b 5f f8 0b b7 1a 82 74 07 24 9b de f9 c5 b9 69 97 71 3b a6 54 fb d9 7a 8b 7e 33 f4 6c e9 95 ea b3 f6 ce 2f f9 25 4a ae ea 97 94 9f 11 46 84 a9 0c 23 cd 3e 73 c3 3b da f9 85 bf 90 c6 b3 bd fb fd ef ed 7d ff a8 3c 24 b8 77 e8 6f 1e 24 7d 78 48 3f be ff 99 0e fc 97 10 05 ab cf b6 f2 51 45 d4 d3 91 ad ea aa ad da eb 55 3e 9e 67 cd 97 57 cb 97 75 b5 ca eb f6 5a e6 07 4d 47 c2 28 e8 38 ff ec 17 7f fa e9 a7 8f 76 7e c9 21 8d 7e fc d3 9f ad 3f 3b da f9 ec 33 ea 6a fd 7d 1e 09 01 a7 7e 4c eb f3 51 3b fa 5e 36 6a 46 d3 ef 7f 56 8e 2e 89 d4 44 83 6c dc 54 8b 7c 6b 46 6f d2 58 f3 ef cd 88 7a 3c 3f e7 69 b1 4c 9b 3b 84 e1 56 33 3a 27 d2 13 bd 17 df 3b ff fe 67 0d fd a3 e4 03 d4 d5 67 d3 ad e5 9d 5f 82 57 d6 bf f0 17 ae b7 4a 22 dd e3 cc d0 e3 92 66 10 20 f2 51 fb 59 f6 bd cb ef 13 9c fc 7b ed f7 e5 df ef ed 7c 7f eb ce 88 28 42 5f 7c 9f d0 51 fa d2 58 b6 56 77 7e c9 a8 fe ac c9 cb f3 f1 55 3e 59 65 d3 b7 27 f3 f5 f2 6d 36 bb fc fd c1 86 d9 ef bf 2e 36 7f fb 33 3f f3 bd ef 1f d6 63 42 eb 34 9b ce b7 aa f1 a4 58 ce b6 96 eb b2 1c ed dc 01 3f af d6 cd fc 33 ff 63 f9 48 3e a8 ef dc f9 25 77 b6 f8 ff 87 ff 0f ce dd db ee 98 03 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"\|v?Z7yu1m?:4_2r2]nw~1>8Y~YuuLqnUmpjn/_KaA_YYnQ=r/?~r}j]klyUoefq//a'w~1>V7Yg?Msjg~9m~lQwe^_o
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "0d1cb65dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 120092Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 79 77 db 46 b2 28 fe 7f 3e 05 e4 e4 5d 80 91 48 91 b2 e5 45 b2 ad e3 d8 ce 8d ef 2f 76 72 63 cf f6 28 25 07 22 9b 12 62 0a e0 00 a0 6c 8d ed ef fe eb aa ea a5 7a 01 48 3b b9 ef cd d3 9c 89 09 a0 f7 ae ae ae bd f6 bf dd 49 5e be 78 93 fc 58 cc 44 d9 88 79 f2 ed 7e b2 93 2d d6 e5 ac 2d aa 32 c9 da 41 f2 e1 ab 24 49 d7 8d 48 9a b6 2e 66 6d 7a 2c 9f af f3 3a 11 c9 a3 a4 1d cd ab d9 fa 4a 94 ed 9e 7c 9b 24 a5 7c f7 21 b9 aa e6 eb a5 68 8e 92 0f 9f f6 64 ad bc 5d ab df 6d 71 25 aa 75 7b 94 4c c6 7b 89 b8 96 d5 e0 7d f2 89 2a d7 b2 b2 ed 99 3a 86 bf f6 b2 68 46 d7 f2 63 7a 30 ba 3b ba 8f 03 48 74 a5 0a 47 f1 e3 93 7f fc e5 c5 6f ff f9 e3 4f df 3d f9 31 f9 f8 11 3a c3 af b9 fc 9a c5 da 84 09 b4 f2 a3 18 cd d6 75 2d 07 f2 7a 56 17 ab 56 7d 4d 92 13 ff cb a8 a9 67 e6 eb 51 bc 51 fa 5b 54 75 92 61 fb 7b b8 1e 62 d4 60 0b cd 1e ce b0 1c 2d 45 79 d1 5e 26 c3 64 b2 87 c3 af 8f e5 3f 8f 93 b1 fc 67 38 1c 38 6d 25 49 b1 48 b2 b4 28 5b 51 e7 b2 bf 6b 91 26 8f 1e c9 46 a6 d5 d9 a8 16 f9 fc e6 b5 5c 5e e1 0f 01 57 2d 51 c5 e4 c0 8f 83 af e7 b2 f2 5b ff f5 27 e7 b9 16 ed ba 2e 65 3b 72 3d cb 69 1d 34 f4 69 90 0d f4 b3 2a 9b 95 a3 79 01 93 ac f0 5f 59 51 ae db fa 1c 00 a7 bc c8 e4 9e b7 a3 65 de b4 2f ca b9 78 ff d3 22 4b f7 d3 41 b2 9b 4c 06 aa 1d 68 91 f6 ad 70 40 41 c8 85 b4 53 cc 60 51 4b 68 3c 5d 56 17 a9 aa 81 53 1e cd aa b2 a9 96 22 f9 8f ff 48 d4 cf 69 79 e6 3e 65 e9 32 bf 59 17 89 a8 6b b9 51 97 05 c0 60 2a 47 21 06 0e 5c ad 01 de d6 72 a0 8b a2 14 f3 34 d9 91 60 76 b3 12 d5 22 a9 56 72 2f a0 cd 74 5a 9d ff 2e 66 6d f2 13 bc 39 a3 9d c1 af a3 b6 7a 4d 73 56 a3 5b 02 1c 96 a3 f3 75 b1 6c 0b 3c 24 6a d0 72 2c b2 7b f9 df 74 cf be 11 35 bd 13 35 7f 3b 97 1b 4d ef e1 17 ff b2 ca 2f d4 17 f8 c5 bf b4 ab 25 7d 90 3f 9c 1e e6 45 ab fa 90 bf cc 17 09 ba 57 f2 35 fc 63 de ad 57 cb 2a 9f cb b7 f4 c3 bc 9f d7 d5 6a 5e bd 2b e5 17 fd d3 7c 6b eb bc 6c 16 38 0d fd 93 7d 13 02 df 0b 3b d2 36 3f 5f e2 4b f8 d7 bc 15 4b 71 85 28 22 55 bf cc 97 9a 96 a2 e6 eb 30 ab 96 55 bd 2a 66 6f b1 5b f6 64 4a 34 cb 62 8e 1f e9 87 ad 99 d7 95 c4 6f b0 52 fa a7 5d 91 65 f5 0e 56 44 fe 63 57 a4 2d a0 2c fc c3 7a 9f 0b ec 76 6e 47 f4 fb 3f d7 a2 86 ed a5 1f e6 7d be 84 ea f2 bf e6 0d 81 e4 08 5e 1d f1 07 75 2a 00 30 b3 7a b4 aa ab b6 02 20 1c cd f2 d9 25 a0 df 52 81 97 f3 91 40 d6 39 40 12 13 09 17 f7 c1 21 05 bc 6a 0f 0f 60 a2 54 57 01 58 d6 f0 de da 32 79 07 86 e6 18 b5 ab 57 75 78 71 72 d3 f6 0c 10 e3 60 0f 0e 05 5d 10 f4 6a 67 3c 70 50 0c 7f d0 38 c6 69 2f 3a 62 38 ff 1e 6a 13 0c 61 d7 12 ed 46 31 26 7d d9 0b 3e 00 ce 91 6b be 5c 9e e7 b3 b7 12 13 f6 ac 02 ef b1 1d 84 78 57 6f a7 fb c6 ed 12 f6 85 bd 60 e5 3f 79 f8 b6 02 34 94 65 78 13 c3
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "9f216565dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 191Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 ce d7 cb 69 5b 54 cb 74 eb 4e fa 8b 93 34 bd 2a 96 b3 ea ea 7b 1f 9f 17 65 be cc 16 f9 c7 df 4f 3f 4b 3f fe af fe fe bf ee bf f8 e3 ff 92 ff ec ef fa 53 ff cb bf e7 1f fc c1 38 7f 97 7f 7c 98 fc 92 3b 5b 77 0e 93 ff 07 93 76 f2 e0 41 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"i[TtN4{eO?K?S8\|;[wvA
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:05:12 GMTAccept-Ranges: bytesETag: "084bd7dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 216842Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac bd 8b 7f d3 c6 b2 38 fe af 38 be 7c 5c e9 66 e3 da e6 51 6a 47 f1 a5 10 38 e9 81 40 09 7d 50 d7 37 28 f6 26 51 91 a5 54 92 03 69 ec f3 b7 ff 66 66 5f b3 b2 1c e8 ef 7b 3f e7 94 c8 ab d5 3e 67 67 e7 3d 41 29 d3 f3 ee 27 79 76 15 cf 3e 3e bd 5c 66 1f e3 f9 f5 e9 55 5e 54 f1 e9 32 89 ee 7c bb 5a 4d a6 61 f7 6a 59 5e 06 93 49 ff bb ef a7 e2 f6 bb 07 0f 86 c1 b5 14 b9 14 bf 84 d1 c1 6d 7b 59 ca 56 59 15 c9 ac 6a 8f ce 97 d9 ac 4a f2 ac f5 2e a8 c2 db 42 56 cb 22 6b 9b c2 76 14 55 37 57 32 3f 6f 55 eb 54 56 ad 4f d1 4e 7f 34 cb b3 b2 6a bd 8c 6e df 14 f9 22 29 e5 f0 3a 4f e6 ad 9e 28 a1 02 b4 fc 4c 5e 15 72 16 57 72 7e 72 93 cd 2e 8b 3c cb 97 e5 61 51 e4 c5 bf e2 6c 9e 26 d9 05 76 94 9c e3 bf aa a9 2c ca e4 a7 16 55 a1 c6 f3 54 76 3f c5 45 16 b4 9f 1d be 79 7b f8 f4 c9 bb c3 67 3b ad b7 9f 7f 3c 69 7d 8a cb 16 f6 53 e5 d8 55 6b 6e fb 6a 95 ae b3 96 c4 a6 5a 97 ba bb d6 99 bc 8c af 13 28 39 bb 69 cd f2 b9 6c c5 d5 b0 f5 47 d6 de cd ba 65 05 6b 18 ae 65 0a 8d 7d ea 74 4c ef 69 7e 11 b4 b1 c3 61 eb 07 a8 80 dd c5 d0 4c 55 c9 42 37 6e da ec b6 de 41 3f 1f 5b 37 f9 b2 db da bf df 0e 47 9f a2 6a 2d 2e be 7a 2d cc 9a b7 3e ad d7 6e 33 ee e1 ea c0 44 df 25 0b 99 2f ab 20 c0 7d ab a0 81 4f b0 13 a2 17 ae d5 ca fd 16 dd ce d2 bc 94 f3 e1 4e 4f 64 f2 73 85 9f ad 05 0d 51 af f2 cb ee 57 8d 23 d4 8d 8f b0 e7 b5 98 e5 8b 2b d8 70 09 c3 5b af c5 f3 e8 49 51 c4 37 dd a4 a4 bf ab 55 50 45 07 55 a7 d3 ce 96 8b 33 59 30 28 e9 a6 32 bb a8 2e 43 37 93 bf 1c 58 b5 b2 65 9a ee 40 65 f8 32 3f fb 53 02 f8 31 f8 52 33 7a 1d a9 b9 da ef ab 20 b3 df d3 88 bb b3 38 4d 83 ea 32 29 43 81 ff 76 17 b2 2c e3 0b 19 65 e3 0f f7 6e 33 3d 82 b5 da a7 b2 95 cf 66 cb a2 00 00 99 2f 0b 04 86 65 56 2e cf ca 59 91 5c 61 f3 c3 3f 32 fc 66 11 5f 05 81 14 09 f4 0c 6d 24 bb fd 75 d8 ba 77 2b bb 55 7e 52 e1 57 41 b8 fe 10 76 ff cc 13 80 c9 3f b2 56 ab 0d bf 87 ed b6 ea 3f 8b 17 32 6a ff ec b5 4b 23 d5 ef d5 40 a2 8c 7e ad f5 54 aa ee 55 91 57 39 ce 3e 7a 4d 6b d1 9d 15 12 76 28 50 93 b4 6f 61 92 eb 30 08 47 b3 34 2e cb d6 1b 75 64 8a e5 ac 82 1d 86 95 a1 1e 14 0c c0 d9 54 1d 9e 5e c5 85 cc aa d7 c5 1b fa 0b 5d c3 ba eb 57 7c 90 fa 45 d6 e9 04 ea 25 36 6a e7 71 26 23 00 2a f5 62 c9 0a b3 70 cd 7e 02 80 20 62 c8 46 78 a0 dd 58 42 35 cd 11 bc bb ad 0f 67 28 45 bd a7 61 22 78 1f c3 42 f8 03 1d 96 eb 08 5b af f5 e2 06 f8 cf 66 2c 5b 09 2c 62 9c cd 10 f2 de 84 b2 5b c8 45 7e 2d 15 50 8d 08 19 40 47 1a 5a 65 78 0e 4b 8d 93 cc a3 de 28 df 97 1a c2 46 bb bb 79 28 27 f9 d4 ff 1a 3e 7c 17 14 21 9c 3d bb ac 7c f5 14 ae 0c 47 55 71 73 cb 41 79 0d a7 73 76 19 e4 e1 6d 16 e5 7c 78 af c7 57 41 ae 61 28 1c 42 77 eb 35 74 f1 3c 28 43 b5 f2 79 b4 d7 17 71 54 9a 51 e1 60 71 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "6356365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 772Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 b6 ee 7c 76 f4 8b 3f 5a 37 79 da b4 75 31 6d 3f 3a bc cc ea 34 1f 15 9f fd e2 5f 32 fa fd e9 9f c3 f3 f5 72 da 16 d5 32 5d 6e e5 77 7e 31 be ad 3e fb fd bf 97 7f ff b0 38 df ba ac 8a 59 ba f3 bb 7e f6 59 75 a7 ce db 75 bd 4c ab 71 fe 6e 55 d5 6d c3 70 6a 6e f9 d9 2f d6 cf 1e fd e2 5f f2 4b 0e b5 61 41 5f 8c a7 59 59 6e d5 e6 95 51 3d 72 bf 2f ef b8 3f 7e c9 72 bc f8 ac 18 e5 9f 7d ef fb a3 e5 f8 cb cf b6 2a 6a ba 1e 95 c0 9d b0 f8 5d 6b c1 ab f9 6c f7 ee ce e1 79 55 6f 65 9f ed 1c 66 8f f3 71 99 2f 2f da f9 61 f6 c9 27 77 7e 31 3e a7 56 df e3 37 bf ff 59 fe bd ec fb a3 e9 67 bf eb ce e8 9c 1a 9f 3f ae 4d e3 73 6a bc f5 bb ee fe c2 f2 67 7e a6 39 fa ac bc f3 0b 7f e1 97 93 9f ce a7 ed f8 6d 7e dd 6c 51 f7 77 c6 f9 65 5e 5f 6f cd 3f 3b a2 bf be 37 ff fe 56 fd bd f3 ef df b9 f3 7b d4 e3 66 55 16 d3 7c eb 7c 7b 7b b4 7b e7 d1 16 81 df 1d 95 8f 9b 5f f8 0b b7 1a 82 74 07 24 9b de f9 c5 b9 69 97 71 3b a6 54 fb d9 7a 8b 7e 33 f4 6c e9 95 ea b3 f6 ce 2f f9 25 4a ae ea 97 94 9f 11 46 84 a9 0c 23 cd 3e 73 c3 3b da f9 85 bf 90 c6 b3 bd fb fd ef ed 7d ff a8 3c 24 b8 77 e8 6f 1e 24 7d 78 48 3f be ff 99 0e fc 97 10 05 ab cf b6 f2 51 45 d4 d3 91 ad ea aa ad da eb 55 3e 9e 67 cd 97 57 cb 97 75 b5 ca eb f6 5a e6 07 4d 47 c2 28 e8 38 ff ec 17 7f fa e9 a7 8f 76 7e c9 21 8d 7e fc d3 9f ad 3f 3b da f9 ec 33 ea 6a fd 7d 1e 09 01 a7 7e 4c eb f3 51 3b fa 5e 36 6a 46 d3 ef 7f 56 8e 2e 89 d4 44 83 6c dc 54 8b 7c 6b 46 6f d2 58 f3 ef cd 88 7a 3c 3f e7 69 b1 4c 9b 3b 84 e1 56 33 3a 27 d2 13 bd 17 df 3b ff fe 67 0d fd a3 e4 03 d4 d5 67 d3 ad e5 9d 5f 82 57 d6 bf f0 17 ae b7 4a 22 dd e3 cc d0 e3 92 66 10 20 f2 51 fb 59 f6 bd cb ef 13 9c fc 7b ed f7 e5 df ef ed 7c 7f eb ce 88 28 42 5f 7c 9f d0 51 fa d2 58 b6 56 77 7e c9 a8 fe ac c9 cb f3 f1 55 3e 59 65 d3 b7 27 f3 f5 f2 6d 36 bb fc fd c1 86 d9 ef bf 2e 36 7f fb 33 3f f3 bd ef 1f d6 63 42 eb 34 9b ce b7 aa f1 a4 58 ce b6 96 eb b2 1c ed dc 01 3f af d6 cd fc 33 ff 63 f9 48 3e a8 ef dc f9 25 77 b6 f8 ff 87 ff 0f ce dd db ee 98 03 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"\|v?Z7yu1m?:4_2r2]nw~1>8Y~YuuLqnUmpjn/_KaA_YYnQ=r/?~r}j]klyUoefq//a'w~1>V7Yg?Msjg~9m~lQwe^_o
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "9f216565dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 191Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 ce d7 cb 69 5b 54 cb 74 eb 4e fa 8b 93 34 bd 2a 96 b3 ea ea 7b 1f 9f 17 65 be cc 16 f9 c7 df 4f 3f 4b 3f fe af fe fe bf ee bf f8 e3 ff 92 ff ec ef fa 53 ff cb bf e7 1f fc c1 38 7f 97 7f 7c 98 fc 92 3b 5b 77 0e 93 ff 07 93 76 f2 e0 41 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"i[TtN4{eO?K?S8\|;[wvA
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "0d1cb65dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:25 GMTContent-Length: 15097Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 7d 6b 93 e3 38 8e e0 f7 fe 15 be e8 e8 a8 ca 9e 74 8d 2c 3f 33 2b ba 6f 1e b7 3b 33 7b bb 73 b7 3b 8f b8 b9 ee 8e 0d d9 96 d3 8a 92 2d af 24 57 66 f5 46 ff f7 23 29 52 22 41 00 a4 9c d5 7b bb 9d 53 39 29 89 04 49 10 04 40 10 00 df 95 d9 a7 6b 31 2d ce 65 71 ce ef bf 28 4e 4f 93 7f ff 62 32 d9 17 cd 45 7c 79 9c 74 1f a6 db b2 da 7d 78 2f 3e 7c cc eb b6 d8 65 e5 34 2b 8b a7 f3 e3 e4 54 ec f7 65 fe fe 8b 9f be f8 e2 38 bb ff e2 98 8a 7f 73 f1 6f 21 fe 2d c5 bf 95 02 77 a8 ce ed f4 39 2f 9e 8e ed e3 64 91 24 aa 7c 76 ff c5 b6 da 7f 52 05 76 55 59 d5 8f 93 2f e7 f3 b9 fa a6 bb 95 ef 9f 44 a7 f4 c3 31 cf f6 79 dd 3f 9a 2e eb c7 53 56 9c 15 a8 4b d5 14 6d 51 89 be d5 79 99 b5 c5 c7 dc 87 78 ac 55 d1 a3 ee 51 22 47 56 89 a1 1d ca ea f9 71 72 14 63 ca cf 76 2d f1 bb ba b6 53 d9 dd be c1 a6 d8 e7 ce c3 b4 d9 d5 55 59 2a c8 06 d8 f4 05 03 e7 0c 2b 2f 8b 4b df 23 ae 13 db f6 7c 8f 42 80 93 c7 cc 11 02 4a 4c 75 b6 2d f3 fd 00 6e 57 0d 5f af e7 26 2f f3 5d ab 00 4f 4f d5 8f d3 6b 93 d7 d3 ee e5 e3 e4 5c 9d 73 89 3c 31 b9 db 0f 45 4b 7c 3c 35 d8 07 d1 1d 45 56 ff 76 ad da bc a3 05 f1 fb da b6 b2 f9 bd e8 cf be f8 28 7e 95 e2 5f 7b ff c5 a1 aa 4f f7 04 8d 89 a1 9f 2f 57 51 a8 2c ee bf a8 44 05 81 d0 4b 2d 60 b6 02 4a 9b bf b4 59 9d 0b 6a 6b 8f f7 5f 5c bb f9 39 65 f5 53 71 d6 33 7f c9 f6 fb e2 fc a4 9f cc 50 da ec 32 3d 0a fa 28 25 8d 4c 35 81 d6 4f db ec 6d 72 3f d1 ff bb eb 08 f9 31 db 49 3a bb 17 7f 1d e5 0c 76 53 79 6d e5 b4 28 a8 a2 90 99 9c 6d 55 0b 2a b6 70 50 16 ea 7d 59 34 ed b4 69 3f 95 b9 f5 ad 95 33 63 55 93 dd 28 b3 4b 23 ca 98 bf de 0f 1f 9b 4b b6 33 e3 90 eb 11 59 83 4d f1 a3 a8 3b 4b 92 af 3a fc 6b 6c 6b f4 55 97 f6 a9 ae ae 17 f5 57 21 3f 74 33 36 20 71 80 74 c8 4e 45 a9 18 c4 31 af 8b f6 bd db 82 f7 b6 1b 18 7c 6d 58 82 f5 1e a0 4d 4c a3 6a f3 f9 58 b4 b9 1a a1 f8 24 5e 4e 9f eb ec f2 1e 7e 50 04 4a 7f a5 bf 54 ee 37 81 4f f5 f0 38 d9 8a 41 7f 98 ca 17 1d c2 0c c3 52 5c d1 f0 8f d9 bb d5 fb 81 89 01 1a 79 b7 59 de 99 01 8b a2 8b cb cb e4 f7 79 f9 31 97 4b 74 f2 c7 fc 9a df 0f cf f7 93 ff 2d 26 f0 ef b3 f3 d3 e4 4f bf bd 9f fc 39 3b 56 27 f1 f2 d7 75 91 95 f7 93 26 3b 37 62 0d d5 c5 a1 9b df da ef 89 a2 60 43 dc b3 44 b4 85 50 b8 4d 82 93 ff 56 9c 2e 55 dd 66 e7 d6 a2 a4 6d 25 e8 e2 24 20 08 00 4d 55 16 fb c9 97 79 0e cb ee ca 3c 13 50 44 d9 a3 aa 9a ed 3e 48 ea 39 ef 45 33 7a f6 3a 7a 91 c4 33 dd e7 bb aa ce 3a c6 dc d3 b7 bd 5e 8c 08 58 af d7 ba ee 4e cc 90 45 ba 66 6d d4 a7 ac 94 0d 7e bd bb d6 8d ac 72 a9 8a 73 9b d7 0e 83 33 e3 78 b9 f7 5f 4d be d6 4b ea 45 52 ab c2 cb f0 d1 85 62 57 c7 ea 09 56 d9 e6 67 29 19 9c 8a 0a 35 dd a8 5c 24 7d fd 63 a5 f0 ea 15 7e 7c cc 0e 6d 8f 09 05 f4 71 f2 e6 fb 34 79 f3 9e 83 62
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "8e6fe265dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 2345Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 c6 65 76 3d cb da 7c bb c9 db ed eb c5 28 c1 07 eb 62 9b fe c5 c7 dd bf d3 6f 75 3f d9 2e 8b a6 4d 7f 71 92 a6 93 ea dd 76 53 fc a0 58 5e 3c a2 df eb 59 5e 6f d3 47 87 c9 2f 49 92 79 bb 28 d3 1f a7 37 d6 c5 b4 69 cc ab fc d6 ac 68 56 f4 f7 a3 74 59 2d f3 43 fa 60 55 35 45 5b 54 cb 47 69 36 69 aa 72 dd f2 a7 57 c5 ac 9d 3f 4a 77 1f 1e 3c 5c 09 cc 10 8d f4 5b 0c 6d 91 d5 17 05 bd ba 83 77 56 d9 6c c6 d8 d0 5f fd 17 d0 3c de d7 0f b6 8b e5 2c 7f f7 28 fd 54 1f 7c 68 20 df 5f bd 03 3c 0c 97 87 58 67 b3 62 dd 3c 4a f7 80 56 9a 9e 57 cb 16 54 c8 09 d7 7d f9 68 fb 2a 9f bc 2d da ed 6c 59 2c 32 f4 b6 3d 5b d7 fc 0b 61 36 de 6b d0 66 d3 77 fd f7 cf 8b b2 dc 5e 54 33 ea 64 52 b5 73 34 ba e5 97 cb 6c 41 9f 2b 09 b6 67 d5 d5 72 52 b4 11 ea 6c 2f b2 62 c9 24 52 c2 ef 3d e0 01 f6 1b 4e 69 c0 f9 b2 4d db 59 8f 33 e6 79 46 14 1a 62 99 b2 60 f8 6d 9d 2d 65 12 82 a1 df 0b 86 be a1 11 61 f4 7b be cd af cf 6b 1a 59 d3 1d 19 f5 40 50 76 7e 77 fa 99 d2 53 ad b2 69 d1 12 af d1 ab 00 af bd 9f 57 f5 e2 91 fc 5a d2 cb f7 66 5b 3b a3 74 9b 26 7a 94 ee dc 41 3b ea 23 4d 77 77 fa 70 76 f1 ed 26 28 f8 9f 82 20 20 1d 32 34 2d 8d 64 ca 30 1d 23 d6 39 bd 5d 5c 86 8c c8 0c 67 25 a5 58 96 c5 32 df 9e 94 d5 f4 2d be 30 ac c9 ad 0c c9 ec 9c 3b c9 ea 7d a4 28 31 32 d7 8b ed 66 5e 5d a5 f6 83 65 fe ae dd 56 85 c0 1f f4 5a ac ea fc 72 7b c1 f8 5b dc 00 38 fd 5d 8b c5 aa aa db 6c e9 58 8b 5f e8 41 e0 3e ae 6f ec e3 3a ec c3 1f ff 60 5f 6d b1 20 0a 07 b0 44 c5 a5 cd 2a 5b 7e 8f 3e db 6e af 57 f9 67 1f 2f 88 81 e7 1f 7f df 43 e2 d6 af 5e e7 59 bd e1 4d 6f aa 55 14 f4 d3 82 84 c6 7b ab 37 e8 78 6f 8a 68 48 8b 21 7a 53 2f f4 2f 43 d3 be f1 5a 9c cd 98 9a f3 bc b8 98 b7 8f d2 7b 3b 90 73 6a 6a 94 e7 2e 7d 90 3e c0 3f 24 11 1b e0 8b 02 b6 88 f9 93 04 78 97 79 4d cc 9e 95 db 59 59 5c 10 02 a4 9b da 6a b1 01 9e a8 07 87 b1 af a1 db 6a 25 88 e1 0f 8b e9 4e ca 18 a6 e9 b4 2a ab fa 51 fa e3 0f 1f 3e c4 9f be 4e 3e d0 16 eb ba 41 93 55 55 90 fa aa 37 a1 81 8f f9 03 8f 15 cb fc 9c 48 b5 cb dd dd f6 4d 11 14 79 73 ff b6 6f 8a 80 f0 9b b5 cc cf ad 3b e5 57 a5 53 7d 35 e8 95 db 28 a3 a1 8d ea 79 68 39 10 a8 c5 db 3a 55 53 d2 ef a0 91 7e 5a d1 54 9e 97 d5 d5 a3 34 2f cb 62 d5 14 a4 85 49 27 da 4f e7 c5 6c 96 2f f1 d9 d5 bc 40 27 a4 2d 89 f4 cb ea aa ce 56 d1 fe a9 85 18 1b 6f 2a cd ec 0e cd 14 bf cf f2 06 a4 f8 6d d3 74 96 9f 67 eb b2 bd 41 2c 48 06 d9 70 e1 4d c7 65 be 5c 58 6c 0c 2e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "8e6fe265dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 4173Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 c6 65 76 bd 2e b6 e9 df bc de 2e 16 17 93 ac 1e 25 dd 0f db a2 4d b3 ce c7 6d 36 49 c3 0f 8a b6 cc d3 66 95 2d bb 2d f9 8b 5f 9c a4 69 9b bf 6b b7 ab cb bc 3e 2f ab ab 47 69 5e 96 c5 aa 29 9a 43 fa ea 6a 5e b4 f9 36 bd 3d cd 1f a5 cb ea aa ce 56 87 c9 2f 49 92 79 bb 28 d3 1f 27 40 eb 62 da 34 02 91 61 cd 8a 66 45 7f a1 f1 32 07 84 55 d5 14 6d 51 2d 1f a5 d9 a4 a9 ca 75 cb 9f 5e 15 b3 76 fe 28 dd 7d 78 f0 70 f5 8e 21 fa b8 75 30 6d e6 d9 4c 30 75 c0 ce 8b 77 f9 0c 90 7e 7f f7 99 df c1 aa 2a 96 2d bd 9b 5f e6 cb b6 a1 ef d6 6d d5 eb c7 83 dc 56 ab 47 e9 0e de 2c f3 f3 56 7f 35 58 ee ec fc ee f8 73 9e 17 17 73 fa ce fc fd fb 9b 0f f2 77 ab 3a 6f 1a 42 62 6b 56 4d d7 0b ea 72 3c a9 66 d7 e3 ea fc bc c9 5b 69 96 7e 92 7e bc 7a f7 f1 9d 1e 16 dc ff f6 55 3e 79 5b b8 69 d8 6e a6 75 45 13 b1 bc 78 44 b8 ad a7 73 74 c8 48 ee de df 01 c9 02 44 17 59 7d 51 10 05 f8 8f 55 36 9b f1 7b fc d7 24 9b be bd a8 ab f5 72 b6 3d ad ca aa 7e 94 fe f8 f9 f9 39 be 31 5d fa 2d 68 e6 1f a5 d3 8a 48 b7 6c d1 66 52 d5 33 a2 53 9d cd 8a 35 51 71 4f 7a 9e 54 ef 98 74 e0 96 dd d5 3b fe 3f b0 4a 6b 62 d4 ad 9d 51 aa ff 1b df eb 8f 96 fa a8 1a a1 79 6c e6 7a ad 05 97 4e fb 3a 2f b3 b6 b8 8c b4 17 84 b9 b9 fc 2a 18 12 f8 62 96 fe f8 64 0f ff c9 10 ba 5f 76 71 df 25 dc d1 2e 32 54 fa 7f b7 f5 1e b5 ee e2 52 56 d9 4c 30 b1 14 7e 94 ae eb 72 0b 5f d0 0c 6d ef 8e 2f 8a f3 3b e9 94 06 48 38 eb 8f 65 b5 5d e7 ab 3c 6b d3 1f cf f3 c8 08 8b 69 15 05 4a 9f 2f c7 ab e5 c5 1d 07 a1 ff f2 a4 5d a6 5d 95 31 2b b2 b2 ba 08 b5 06 01 eb b4 22 3e be 2a e8 65 ee db 4a 79 b1 24 16 cd b7 27 65 35 7d 0b 72 7d ab f3 0d 7f f6 83 aa 5a 10 f5 f0 3b 71 77 5b 4c b3 72 3b 2b 8b 0b 9a 48 e2 e8 3e 92 0b 12 82 b0 9b be 32 b1 f2 ff 2d f7 99 e3 a2 40 38 a8 0f fd ed 06 79 9e ae eb 06 02 82 fe f1 77 45 6a af 68 a9 7b 7e f9 bc 28 69 7a a8 97 72 35 cf b6 f4 bb cf 76 68 de fd b9 20 86 0d 84 ec 07 db c5 72 96 bf 23 d1 d9 dd 7f b0 7f 70 ef d3 fd 07 fd 01 93 f2 28 7e 20 43 8e 8f c6 20 4e 9c 87 3f 2d e2 fa 77 2d 7f 32 9a 93 aa 6d 41 6e fe c3 8c a8 c9 b5 0f db 37 f5 9a 2d 8b 05 f7 69 14 01 3e 20 b1 aa 96 db 34 d6 92 a6 61 46 4a 9f e0 b1 ee d9 f8 65 1f c2 6c 5d f3 2f 84 c8 f8 1e 9b 92 e1 ef 08 a5 df d3 40 78 9b 5f 9f d7 d9 22 6f 52 41 72 42 44 9d e6 67 4b 42 94 60 ec fc ee f4 33 a5 47 c9 4f 10 00 da 21 d0 d6 d9 b2 39 af 6a 22 40 43 6c 96 6f ed 8c ef f3 0c 11 1b 0c 7d 45 dd a7 cc 03 5d d8 cc b1 1b 60 8b 86
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "8e6fe265dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 678Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 e6 ed a2 4c 7f bc cc ae d7 c5 b4 69 b6 9b b7 c5 72 5a cd 72 fa 3d fd c5 49 9a ce 8a 66 45 5f 3e 4a 97 d5 32 3f a4 0f 56 55 53 b4 45 b5 7c 94 66 93 a6 2a d7 2d 7f 7a 55 cc da f9 a3 74 f7 e1 c1 c3 d5 bb c3 e4 97 24 c9 98 de 5a 17 db 80 b5 3d bf 37 0a fe be 2c f2 2b 86 ee 80 d5 79 99 b5 c5 25 03 3b af 96 ed 76 53 fc 20 27 80 7b 11 70 f6 75 8b dc a4 ac a6 6f f1 ea 22 ab 2f 0a 02 b7 bb b3 7a 97 ee e0 93 55 36 9b 15 cb 8b 47 f2 d7 a4 aa 67 79 4d df d3 d7 84 7d 31 4b 7f 3c cf b9 53 f9 66 bb cc cf db 6d 1d cd a7 e8 9b be c9 a6 6f 2f ea 6a bd 9c 51 f7 65 45 6f ff f8 79 86 ff f0 a5 f9 e4 de bd 7b f8 93 51 3f cf 16 45 49 58 9d 54 eb ba c8 eb f4 45 7e d5 1b c3 fc 1e 8f c0 61 97 02 65 80 98 e7 c5 c5 bc 7d 94 ee eb df 65 b1 a4 e6 9d 0f 15 db 49 d5 b6 d5 a2 3f 9c 7e 67 99 74 67 e9 ed 4f 5e 2d b0 0d 02 6d b5 22 7c f0 9b 19 dc c3 87 0f 7b 30 79 12 fc 0f aa b2 d3 85 3f a5 d5 65 5e 9f 97 d5 15 75 bc 6e ab 5b 01 2b 8b 0d f0 64 9e 79 b6 88 28 f7 05 f1 80 52 7b 3a 9a 08 85 95 78 f2 b2 4f ba 3d fc 87 16 65 d1 10 07 b6 d7 65 be dd 5e af 88 0f 49 20 8a 45 56 d2 3b 19 a0 6d ff 20 af 69 14 69 fa ad a1 96 f8 32 c6 38 e7 e7 b7 1c fc a3 f3 a2 26 d0 d3 79 51 ce 84 10 32 90 6d 9e 1e 19 ca ed 00 95 59 14 8e e5 9d 41 50 ab 3a e7 37 84 d8 44 c1 5e b3 65 d5 e6 04 8f 5b 09 55 09 9e 23 e8 ce 14 ff 31 29 f8 4b 22 1f 49 97 a1 c5 bd 73 fc c7 df f6 09 85 17 e5 55 f3 c9 74 6f 92 3f a4 c9 1f 40 c1 ff 8c f8 dd 61 64 07 2a 1a ec 16 af 33 d9 04 42 1f 31 e0 ac 58 0b 78 8c 69 00 f8 2c 5f 54 3e 64 86 79 59 34 c5 a4 28 8b 96 34 04 ff 5e e6 e9 ef 5a 2c 56 55 dd 66 cb 16 80 0d bd b7 77 95 b1 b5 27 9e 79 e9 c8 7e a6 b2 db f9 74 e3 90 7d ac da 6c 42 1f 2e db 7c d9 32 72 44 0a 30 07 cd e2 60 d7 bf 24 f9 7f 00 d9 88 60 4e 33 06 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"LirZr=IfE_>J2?VUSE\|f-zUt$Z=7,+y%;vS '{puo"/zU6GgyM}1K<Sfmo/jQeEoy{Q?EIXTE~ae}eI?~gtgO^-m"\|{0y?e^un[+dy(R{:xO=ee^I EV;m ii28&yQ2mYAP:7D^e[U#1)K"IsUto?@ad*3B1Xxi,_T>dyY4(4^Z,VUfw'y~t}lB
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "6356365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 772Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 b6 ee 7c 76 f4 8b 3f 5a 37 79 da b4 75 31 6d 3f 3a bc cc ea 34 1f 15 9f fd e2 5f 32 fa fd e9 9f c3 f3 f5 72 da 16 d5 32 5d 6e e5 77 7e 31 be ad 3e fb fd bf 97 7f ff b0 38 df ba ac 8a 59 ba f3 bb 7e f6 59 75 a7 ce db 75 bd 4c ab 71 fe 6e 55 d5 6d c3 70 6a 6e f9 d9 2f d6 cf 1e fd e2 5f f2 4b 0e b5 61 41 5f 8c a7 59 59 6e d5 e6 95 51 3d 72 bf 2f ef b8 3f 7e c9 72 bc f8 ac 18 e5 9f 7d ef fb a3 e5 f8 cb cf b6 2a 6a ba 1e 95 c0 9d b0 f8 5d 6b c1 ab f9 6c f7 ee ce e1 79 55 6f 65 9f ed 1c 66 8f f3 71 99 2f 2f da f9 61 f6 c9 27 77 7e 31 3e a7 56 df e3 37 bf ff 59 fe bd ec fb a3 e9 67 bf eb ce e8 9c 1a 9f 3f ae 4d e3 73 6a bc f5 bb ee fe c2 f2 67 7e a6 39 fa ac bc f3 0b 7f e1 97 93 9f ce a7 ed f8 6d 7e dd 6c 51 f7 77 c6 f9 65 5e 5f 6f cd 3f 3b a2 bf be 37 ff fe 56 fd bd f3 ef df b9 f3 7b d4 e3 66 55 16 d3 7c eb 7c 7b 7b b4 7b e7 d1 16 81 df 1d 95 8f 9b 5f f8 0b b7 1a 82 74 07 24 9b de f9 c5 b9 69 97 71 3b a6 54 fb d9 7a 8b 7e 33 f4 6c e9 95 ea b3 f6 ce 2f f9 25 4a ae ea 97 94 9f 11 46 84 a9 0c 23 cd 3e 73 c3 3b da f9 85 bf 90 c6 b3 bd fb fd ef ed 7d ff a8 3c 24 b8 77 e8 6f 1e 24 7d 78 48 3f be ff 99 0e fc 97 10 05 ab cf b6 f2 51 45 d4 d3 91 ad ea aa ad da eb 55 3e 9e 67 cd 97 57 cb 97 75 b5 ca eb f6 5a e6 07 4d 47 c2 28 e8 38 ff ec 17 7f fa e9 a7 8f 76 7e c9 21 8d 7e fc d3 9f ad 3f 3b da f9 ec 33 ea 6a fd 7d 1e 09 01 a7 7e 4c eb f3 51 3b fa 5e 36 6a 46 d3 ef 7f 56 8e 2e 89 d4 44 83 6c dc 54 8b 7c 6b 46 6f d2 58 f3 ef cd 88 7a 3c 3f e7 69 b1 4c 9b 3b 84 e1 56 33 3a 27 d2 13 bd 17 df 3b ff fe 67 0d fd a3 e4 03 d4 d5 67 d3 ad e5 9d 5f 82 57 d6 bf f0 17 ae b7 4a 22 dd e3 cc d0 e3 92 66 10 20 f2 51 fb 59 f6 bd cb ef 13 9c fc 7b ed f7 e5 df ef ed 7c 7f eb ce 88 28 42 5f 7c 9f d0 51 fa d2 58 b6 56 77 7e c9 a8 fe ac c9 cb f3 f1 55 3e 59 65 d3 b7 27 f3 f5 f2 6d 36 bb fc fd c1 86 d9 ef bf 2e 36 7f fb 33 3f f3 bd ef 1f d6 63 42 eb 34 9b ce b7 aa f1 a4 58 ce b6 96 eb b2 1c ed dc 01 3f af d6 cd fc 33 ff 63 f9 48 3e a8 ef dc f9 25 77 b6 f8 ff 87 ff 0f ce dd db ee 98 03 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"\|v?Z7yu1m?:4_2r2]nw~1>8Y~YuuLqnUmpjn/_KaA_YYnQ=r/?~r}j]klyUoefq//a'w~1>V7Yg?Msjg~9m~lQwe^_o
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "803a3365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 13209Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc 7d 09 73 db b8 d2 e0 5f 91 58 29 3d b2 8c 68 ed f7 be af 6a 57 0a 46 e5 43 71 9c f1 35 b6 92 49 ac a7 d5 50 14 24 31 a6 48 85 87 6d 59 e6 7f df 6e 5c 04 0f 27 79 6f bf 3d a6 6a 22 e2 6e 34 fa 42 a3 01 5b 59 c2 5a 49 1a fb 5e 6a f5 ed 84 05 8b ee 23 9b 6d 5c ef fe 78 95 85 f7 ee fc 61 ba 89 e2 d4 9d 66 3e fd 61 e9 cb cb 78 e2 74 37 59 b2 b2 c7 e3 ff f8 fb ff 98 90 dd 7f fe a3 67 9f 30 32 67 64 c4 1c fa db ce 8b c2 24 6d 6d 18 b5 b2 70 ce 16 7e c8 e6 56 9b a6 db 0d 8b 16 ad 65 10 cd dc 60 b4 f2 93 4e a7 f8 26 87 cd b5 1f fd 70 1e 3d 76 3a e2 97 7c 68 ae 85 00 77 3a 4d 25 7f 46 f1 3d 8b 4f f9 38 b7 5e b4 61 9d 0e 56 6e f9 00 a1 1b 7a 3f a8 42 8e 19 dd b0 97 97 d7 e7 a0 e0 7f 79 39 84 7a 1f 18 59 33 ba c8 42 2f f5 a3 d0 7e 43 ba dd 6e c8 9c 9d bf b0 d7 ac 9b c6 6e 98 04 6e 0a 19 02 3b 1f a9 99 0b d5 a1 6e ff 0d fd 38 de 9f c0 27 fc 1e 4c f2 80 a5 ad 5b 1a 41 29 e6 be e9 c6 ee 23 7c 38 fd 45 14 db 58 f6 91 1e f4 3f be 7b d3 0d 58 b8 4c 57 fd 8f 7b 7b ce ed 1e 0d d9 f8 e3 db 83 c9 1e 6f f7 51 b5 fb 08 ed 62 96 66 71 d8 ba cd fb 0a cc 56 24 87 de 89 32 ab 67 51 0a 3d 74 bd 95 1b 1f a6 f6 be 33 78 d3 4d b2 19 12 4e b8 b4 8d d9 61 1b 05 c7 2d 3d 20 08 cb 6d 01 cb ed de 1e 41 78 60 f6 d6 3f ff 29 3a 45 18 20 af cf 02 20 45 2c e0 83 bd 19 df 4e 1c 05 59 3f 5d c5 d1 63 2b 64 8f ad 61 1c 43 f7 7f 7d 0a 53 16 af fd 10 90 34 6f bd 09 22 cf 0d fc 67 d6 5a b3 d4 9d bb a9 db 9a 41 d6 3d 2c 67 cb 7a b3 0b 59 6e 75 ff 72 72 01 de de 81 d3 7b 93 1f b3 ae 6e 05 28 07 0a b5 ff f3 bf ff c3 c9 09 fc db b3 91 5a db 7a 56 7a 71 42 ca ba 1b 16 c3 fc d6 48 24 05 ba 7c fb dc d9 85 9d 4e d8 5d bb f1 bd fa 85 cc 5c 57 89 ed 73 b2 51 95 98 9b 64 31 33 3e 79 61 ee db d6 5d 14 32 cb e9 8b f1 3c 18 6f 3a c5 ac 69 b2 5d cf a2 60 ba 89 81 e6 9e 80 fa a6 d3 67 23 7b 6a 15 b0 64 08 8b 44 9c b7 77 9e 8b ae 16 b4 bd 0f 58 65 e3 cc b6 00 7e 8f 9d 64 9b c0 f7 00 7d d8 fd f1 8a 79 f7 96 33 e9 03 fa 59 17 73 38 81 2e 60 20 d5 6f 41 e5 a2 02 00 a6 06 77 aa ab c3 67 d1 72 83 98 b9 f3 6d 2b 88 dc 39 9b 77 2d 4d 68 a2 03 4e c6 53 6a 73 64 7b 81 9b 24 ad 73 81 e7 38 f3 52 e8 25 25 91 b3 4b 41 08 74 a7 1b 37 66 61 4a 53 22 92 a1 0b 2c 15 0d a2 2e 7e 70 56 c4 8f 39 10 ce bb 38 8a d2 df 2c 59 6f 13 03 db c6 a9 cf 12 1a 75 3a 51 b7 48 bf bc ec 72 59 09 f1 78 c2 02 b6 04 5c 50 9c c3 c8 c6 02 62 8e dc e9 98 a9 72 1b 80 32 07 a1 91 fa 5e 0b e6 00 dd e3 e4 ae dd d4 5b b1 b9 cd d1 c8 ba d7 71 b4 f6 13 d6 86 05 10 93 3f 7c 84 9e 64 6e 33 fa ba df 92 d6 ca 4d 5a 73 96 32 0f 89 3c 5d b9 69 ab da b6 f5 97 2d 44 e0 8b 90 39 8e 1a ea 2f de 78 c6 18 f0 f2 03 8b 1f 63 3f 4d 59 d8 fd 67 78 11 01 35 04 fe 3d 0b b6 2d cf 45 e9 ef 27 a2 6f b7 a5 3a dd 44 c1 76 e1 07 41 d1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "9f216565dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 191Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 ce d7 cb 69 5b 54 cb 74 eb 4e fa 8b 93 34 bd 2a 96 b3 ea ea 7b 1f 9f 17 65 be cc 16 f9 c7 df 4f 3f 4b 3f fe af fe fe bf ee bf f8 e3 ff 92 ff ec ef fa 53 ff cb bf e7 1f fc c1 38 7f 97 7f 7c 98 fc 92 3b 5b 77 0e 93 ff 07 93 76 f2 e0 41 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"i[TtN4{eO?K?S8\|;[wvA
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "0d1cb65dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 40582Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 69 77 db 46 d2 28 fc 3d bf 02 cc f8 19 00 16 45 4b f6 64 ee 0d bd e8 38 b2 93 78 26 ce 62 39 93 64 28 26 07 22 9b 12 62 0a 60 00 50 4b 2c cd 6f 7f bb aa 7a 5f 40 ca c9 33 e7 be 3c c7 16 09 f4 de d5 d5 b5 d7 83 fb 83 e4 d7 ef d6 ac b9 4e 2e 1e 8d 3e 19 ed 27 37 49 36 cb 93 7f 1c 25 9f d7 eb 6a 5e 74 65 5d 25 45 35 4f ea ee 8c 35 c9 ac ae ba a6 3c 59 77 75 d3 f2 a2 bf fe 06 55 47 75 73 fa 60 59 ce 58 d5 b2 e4 fe 83 8f 06 d9 62 5d cd b0 66 c6 86 49 97 27 ef 3f 4a 92 74 cd df b6 bc f6 ac 4b 1f c3 ef fa e4 57 c6 bf 27 4f 9f 26 dd f5 8a d5 8b e4 bc 9e af 97 2c f9 eb 5f e3 2f 47 ec 6a 55 37 5d cb 1b 48 92 83 24 b3 9f 26 4f 13 36 9a d7 b3 f5 39 ab 3a 2c 42 c5 3a 18 c7 60 2f 57 8f c6 89 31 44 1a 9f fe 94 8b 24 1b e8 76 72 eb 65 92 74 67 4d 7d 99 54 ec 32 79 d9 34 75 93 a5 62 01 1b f6 db ba 6c 58 9b 14 c9 65 59 cd 79 99 cb b2 3b e3 bf 64 43 69 fe d8 6a aa 61 dd ba a9 60 70 d6 8b 5b ea 70 2c 5e dc e6 59 ca 77 82 2d ca 8a cd d3 64 a0 16 44 74 72 20 bf f0 0a 67 65 3b 34 66 76 38 4c 58 78 f1 2f 8a 26 e9 f8 6a 4d a6 43 ec ac e1 df bf c1 25 1f 9d b2 ee db a6 ee 6a e8 e5 9b 05 bd 86 85 ed 46 2d ec 31 3d 38 c5 07 8b 65 21 57 f9 20 be a0 72 9a 58 7c 34 2b 96 4b 6b c2 b7 1f 6d dc 12 d5 02 07 bf 19 6f a3 58 ad 96 d7 19 1f 7b 62 35 44 43 5b e3 d0 56 eb f6 8c 7e 97 f8 9b 2f 11 bb 92 d3 a9 f8 a3 f7 a2 78 cd bf 57 a3 ae 3e e2 8b 53 9d d2 b3 0b 7c 76 56 b4 df 5c 56 7c 2d 56 ac e9 ae e9 4d c1 df 5c 38 a5 97 fc 59 41 f3 a2 25 cc e9 f9 b5 d1 cb 39 ff 1e 9c 9e 98 5a 2a 5f 9a 10 4f 27 a1 5a 9f 9f b0 c6 dc 78 36 aa ea 39 7b cb 7f d0 e4 45 1f 57 1b fa a8 d6 cb 25 b4 82 cd 32 de 0f 1c 16 82 1d ab 9d 97 bc 9d 43 05 fd f4 6c 06 73 c1 fe c7 fc 1c 0d 93 b6 99 d1 97 8a ef 08 93 5f 5f e3 61 84 5f c9 2d 34 a9 46 73 82 78 80 17 91 83 02 f8 6b 86 62 7c a5 fc 02 7b 91 c1 e6 54 c9 cd 4d f2 32 1f cd 1a 56 74 ec e5 92 c1 48 b2 b4 9d 35 e5 4a 1d 23 38 a6 59 56 8f 3a 76 05 a0 cc 72 40 35 f2 b0 2e ea 26 c9 9a a4 ac 92 99 3e bf 19 c2 c2 a4 99 42 f3 19 82 fa f3 8e f0 19 2e 8a fd 24 6b f2 3c e7 8f 0d 40 ac 47 ad 55 60 98 94 62 30 1c 5c 58 31 07 c8 64 d5 fc f0 ac 5c ce b3 3a 1f ad 8a 86 0f fc 6b be 5b a3 86 9d d7 17 4c be 81 4a b7 e6 0a 5d ea 0d 33 b7 0b f6 48 9d 30 96 ec 24 69 aa 8e 4b 00 47 32 98 58 18 96 54 2b d5 a4 96 87 10 d7 41 36 a3 da 95 35 e4 18 61 af 16 7c e1 52 bc 20 52 da ac 23 1b d8 14 96 37 27 c0 31 e4 d1 68 51 f1 b3 57 76 54 44 c0 99 05 1b 2b 3d 73 89 95 06 03 02 fd 25 ab 4e bb b3 14 76 91 80 76 44 4f 24 bc 00 a8 5c 2a 64 22 ba cd c4 cb c1 39 34 ac b6 6f 70 65 fd cc d2 a2 69 8a eb 14 8f 01 80 9b da e5 3d 7c d4 99 8f 32 75 08 f5 82 76 30 a0 bd e4 09 7d e9 92 dd 64 1f c7 29 20 50 ed 70 06 4b c0 c7 79 34 5a 49 ac 9a 3c c5 22 72 b9 e8 12 e5 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:05:12 GMTAccept-Ranges: bytesETag: "084bd7dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 216842Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac bd 8b 7f d3 c6 b2 38 fe af 38 be 7c 5c e9 66 e3 da e6 51 6a 47 f1 a5 10 38 e9 81 40 09 7d 50 d7 37 28 f6 26 51 91 a5 54 92 03 69 ec f3 b7 ff 66 66 5f b3 b2 1c e8 ef 7b 3f e7 94 c8 ab d5 3e 67 67 e7 3d 41 29 d3 f3 ee 27 79 76 15 cf 3e 3e bd 5c 66 1f e3 f9 f5 e9 55 5e 54 f1 e9 32 89 ee 7c bb 5a 4d a6 61 f7 6a 59 5e 06 93 49 ff bb ef a7 e2 f6 bb 07 0f 86 c1 b5 14 b9 14 bf 84 d1 c1 6d 7b 59 ca 56 59 15 c9 ac 6a 8f ce 97 d9 ac 4a f2 ac f5 2e a8 c2 db 42 56 cb 22 6b 9b c2 76 14 55 37 57 32 3f 6f 55 eb 54 56 ad 4f d1 4e 7f 34 cb b3 b2 6a bd 8c 6e df 14 f9 22 29 e5 f0 3a 4f e6 ad 9e 28 a1 02 b4 fc 4c 5e 15 72 16 57 72 7e 72 93 cd 2e 8b 3c cb 97 e5 61 51 e4 c5 bf e2 6c 9e 26 d9 05 76 94 9c e3 bf aa a9 2c ca e4 a7 16 55 a1 c6 f3 54 76 3f c5 45 16 b4 9f 1d be 79 7b f8 f4 c9 bb c3 67 3b ad b7 9f 7f 3c 69 7d 8a cb 16 f6 53 e5 d8 55 6b 6e fb 6a 95 ae b3 96 c4 a6 5a 97 ba bb d6 99 bc 8c af 13 28 39 bb 69 cd f2 b9 6c c5 d5 b0 f5 47 d6 de cd ba 65 05 6b 18 ae 65 0a 8d 7d ea 74 4c ef 69 7e 11 b4 b1 c3 61 eb 07 a8 80 dd c5 d0 4c 55 c9 42 37 6e da ec b6 de 41 3f 1f 5b 37 f9 b2 db da bf df 0e 47 9f a2 6a 2d 2e be 7a 2d cc 9a b7 3e ad d7 6e 33 ee e1 ea c0 44 df 25 0b 99 2f ab 20 c0 7d ab a0 81 4f b0 13 a2 17 ae d5 ca fd 16 dd ce d2 bc 94 f3 e1 4e 4f 64 f2 73 85 9f ad 05 0d 51 af f2 cb ee 57 8d 23 d4 8d 8f b0 e7 b5 98 e5 8b 2b d8 70 09 c3 5b af c5 f3 e8 49 51 c4 37 dd a4 a4 bf ab 55 50 45 07 55 a7 d3 ce 96 8b 33 59 30 28 e9 a6 32 bb a8 2e 43 37 93 bf 1c 58 b5 b2 65 9a ee 40 65 f8 32 3f fb 53 02 f8 31 f8 52 33 7a 1d a9 b9 da ef ab 20 b3 df d3 88 bb b3 38 4d 83 ea 32 29 43 81 ff 76 17 b2 2c e3 0b 19 65 e3 0f f7 6e 33 3d 82 b5 da a7 b2 95 cf 66 cb a2 00 00 99 2f 0b 04 86 65 56 2e cf ca 59 91 5c 61 f3 c3 3f 32 fc 66 11 5f 05 81 14 09 f4 0c 6d 24 bb fd 75 d8 ba 77 2b bb 55 7e 52 e1 57 41 b8 fe 10 76 ff cc 13 80 c9 3f b2 56 ab 0d bf 87 ed b6 ea 3f 8b 17 32 6a ff ec b5 4b 23 d5 ef d5 40 a2 8c 7e ad f5 54 aa ee 55 91 57 39 ce 3e 7a 4d 6b d1 9d 15 12 76 28 50 93 b4 6f 61 92 eb 30 08 47 b3 34 2e cb d6 1b 75 64 8a e5 ac 82 1d 86 95 a1 1e 14 0c c0 d9 54 1d 9e 5e c5 85 cc aa d7 c5 1b fa 0b 5d c3 ba eb 57 7c 90 fa 45 d6 e9 04 ea 25 36 6a e7 71 26 23 00 2a f5 62 c9 0a b3 70 cd 7e 02 80 20 62 c8 46 78 a0 dd 58 42 35 cd 11 bc bb ad 0f 67 28 45 bd a7 61 22 78 1f c3 42 f8 03 1d 96 eb 08 5b af f5 e2 06 f8 cf 66 2c 5b 09 2c 62 9c cd 10 f2 de 84 b2 5b c8 45 7e 2d 15 50 8d 08 19 40 47 1a 5a 65 78 0e 4b 8d 93 cc a3 de 28 df 97 1a c2 46 bb bb 79 28 27 f9 d4 ff 1a 3e 7c 17 14 21 9c 3d bb ac 7c f5 14 ae 0c 47 55 71 73 cb 41 79 0d a7 73 76 19 e4 e1 6d 16 e5 7c 78 af c7 57 41 ae 61 28 1c 42 77 eb 35 74 f1 3c 28 43 b5 f2 79 b4 d7 17 71 54 9a 51 e1 60 71 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:02 GMTAccept-Ranges: bytesETag: "0d1cb65dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 120092Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 79 77 db 46 b2 28 fe 7f 3e 05 e4 e4 5d 80 91 48 91 b2 e5 45 b2 ad e3 d8 ce 8d ef 2f 76 72 63 cf f6 28 25 07 22 9b 12 62 0a e0 00 a0 6c 8d ed ef fe eb aa ea a5 7a 01 48 3b b9 ef cd d3 9c 89 09 a0 f7 ae ae ae bd f6 bf dd 49 5e be 78 93 fc 58 cc 44 d9 88 79 f2 ed 7e b2 93 2d d6 e5 ac 2d aa 32 c9 da 41 f2 e1 ab 24 49 d7 8d 48 9a b6 2e 66 6d 7a 2c 9f af f3 3a 11 c9 a3 a4 1d cd ab d9 fa 4a 94 ed 9e 7c 9b 24 a5 7c f7 21 b9 aa e6 eb a5 68 8e 92 0f 9f f6 64 ad bc 5d ab df 6d 71 25 aa 75 7b 94 4c c6 7b 89 b8 96 d5 e0 7d f2 89 2a d7 b2 b2 ed 99 3a 86 bf f6 b2 68 46 d7 f2 63 7a 30 ba 3b ba 8f 03 48 74 a5 0a 47 f1 e3 93 7f fc e5 c5 6f ff f9 e3 4f df 3d f9 31 f9 f8 11 3a c3 af b9 fc 9a c5 da 84 09 b4 f2 a3 18 cd d6 75 2d 07 f2 7a 56 17 ab 56 7d 4d 92 13 ff cb a8 a9 67 e6 eb 51 bc 51 fa 5b 54 75 92 61 fb 7b b8 1e 62 d4 60 0b cd 1e ce b0 1c 2d 45 79 d1 5e 26 c3 64 b2 87 c3 af 8f e5 3f 8f 93 b1 fc 67 38 1c 38 6d 25 49 b1 48 b2 b4 28 5b 51 e7 b2 bf 6b 91 26 8f 1e c9 46 a6 d5 d9 a8 16 f9 fc e6 b5 5c 5e e1 0f 01 57 2d 51 c5 e4 c0 8f 83 af e7 b2 f2 5b ff f5 27 e7 b9 16 ed ba 2e 65 3b 72 3d cb 69 1d 34 f4 69 90 0d f4 b3 2a 9b 95 a3 79 01 93 ac f0 5f 59 51 ae db fa 1c 00 a7 bc c8 e4 9e b7 a3 65 de b4 2f ca b9 78 ff d3 22 4b f7 d3 41 b2 9b 4c 06 aa 1d 68 91 f6 ad 70 40 41 c8 85 b4 53 cc 60 51 4b 68 3c 5d 56 17 a9 aa 81 53 1e cd aa b2 a9 96 22 f9 8f ff 48 d4 cf 69 79 e6 3e 65 e9 32 bf 59 17 89 a8 6b b9 51 97 05 c0 60 2a 47 21 06 0e 5c ad 01 de d6 72 a0 8b a2 14 f3 34 d9 91 60 76 b3 12 d5 22 a9 56 72 2f a0 cd 74 5a 9d ff 2e 66 6d f2 13 bc 39 a3 9d c1 af a3 b6 7a 4d 73 56 a3 5b 02 1c 96 a3 f3 75 b1 6c 0b 3c 24 6a d0 72 2c b2 7b f9 df 74 cf be 11 35 bd 13 35 7f 3b 97 1b 4d ef e1 17 ff b2 ca 2f d4 17 f8 c5 bf b4 ab 25 7d 90 3f 9c 1e e6 45 ab fa 90 bf cc 17 09 ba 57 f2 35 fc 63 de ad 57 cb 2a 9f cb b7 f4 c3 bc 9f d7 d5 6a 5e bd 2b e5 17 fd d3 7c 6b eb bc 6c 16 38 0d fd 93 7d 13 02 df 0b 3b d2 36 3f 5f e2 4b f8 d7 bc 15 4b 71 85 28 22 55 bf cc 97 9a 96 a2 e6 eb 30 ab 96 55 bd 2a 66 6f b1 5b f6 64 4a 34 cb 62 8e 1f e9 87 ad 99 d7 95 c4 6f b0 52 fa a7 5d 91 65 f5 0e 56 44 fe 63 57 a4 2d a0 2c fc c3 7a 9f 0b ec 76 6e 47 f4 fb 3f d7 a2 86 ed a5 1f e6 7d be 84 ea f2 bf e6 0d 81 e4 08 5e 1d f1 07 75 2a 00 30 b3 7a b4 aa ab b6 02 20 1c cd f2 d9 25 a0 df 52 81 97 f3 91 40 d6 39 40 12 13 09 17 f7 c1 21 05 bc 6a 0f 0f 60 a2 54 57 01 58 d6 f0 de da 32 79 07 86 e6 18 b5 ab 57 75 78 71 72 d3 f6 0c 10 e3 60 0f 0e 05 5d 10 f4 6a 67 3c 70 50 0c 7f d0 38 c6 69 2f 3a 62 38 ff 1e 6a 13 0c 61 d7 12 ed 46 31 26 7d d9 0b 3e 00 ce 91 6b be 5c 9e e7 b3 b7 12 13 f6 ac 02 ef b1 1d 84 78 57 6f a7 fb c6 ed 12 f6 85 bd 60 e5 3f 79 f8 b6 02 34 94 65 78 13 c3
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Encoding: gzipLast-Modified: Wed, 04 Sep 2024 15:02:01 GMTAccept-Ranges: bytesETag: "803a3365dbfeda1:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 18:26:26 GMTContent-Length: 24726Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 8f e3 ba 92 20 f8 7d 7e 85 bb 2f 0e 50 79 8f ad b6 d3 f9 b4 d1 8d 9e 99 4f 0d cc 62 80 e9 fe b2 b8 38 1f 64 5b ce 54 97 6c 79 65 b9 2a eb 18 75 7f fb f2 29 91 e2 2b f8 90 b3 76 d1 e7 e2 66 d9 b2 18 2f 06 23 82 64 30 98 6d 77 5f 67 f5 b7 a2 a9 f2 1f b3 6d 7d 6c f3 f2 58 34 53 f2 f8 ad aa 37 79 d5 fd fa bd c9 4f a7 a2 b9 9e ea f2 d8 16 cd ac f8 56 1c db f3 ea 58 1f 8b 75 5b 9f 56 f3 75 55 ec 5b f4 cf 7b 51 be bd b7 ab c5 7c fe db fa 7b b9 6b df c9 c7 9f 7a 54 08 dc b9 6c cb fa b8 da 97 1f c5 6e fd e7 ac 3c ee 8a 0f dc 64 6e 68 b2 2a 0e a7 f6 c7 75 57 9e 4f e8 39 21 e0 a7 8d 60 fe e2 be 2a 3e d6 1d ba 7c 73 ae ab 4b 5b 58 30 9e f2 63 71 55 1b 0c 04 90 5f da 7a bd a9 3f 66 e7 f2 cf f2 f8 b6 da d4 cd 0e fd 8a 9e 48 a0 d7 12 19 87 fc 63 d6 cb 86 7c 15 c4 26 93 b1 c9 b7 5f 77 4d 7d d2 90 42 e5 be a9 db b6 3e f4 1d d0 10 40 73 19 bd 8e ea d9 f7 62 f3 b5 6c 67 6d 7e 9a bd a3 46 15 6e 88 04 5d d5 cd aa 6d f2 e3 f9 94 37 e8 ed 35 f9 4c 51 d7 a7 7c 5b b6 3f 26 d9 c3 79 b2 bd 6c ca ed 6c 53 fc 59 16 cd 97 ec fe 71 9a bd 4c f1 3f 8b bb 35 7b 6d 35 d7 b3 a2 7d 38 3b bf d7 df 91 04 af bc f1 82 36 c6 94 91 de 6f f2 73 3b cb b7 6d f9 ad 98 44 80 cd 9e 64 a2 76 79 f3 b5 17 32 fe f0 d6 d4 97 e3 6e d5 bc 6d f2 2f f3 29 fe 5f b6 bc bf 93 5b 09 f2 e9 1a 4f 9d 6f c0 28 54 35 ff 58 6c db 62 37 e3 1a 80 b4 0b 11 88 9a 60 35 bb da 75 5a 56 3c fc 67 b6 2b 1b 04 0f b7 40 7d 7d 39 1c d7 87 f2 c8 d5 f1 f4 41 be 71 6d 3c 7d 48 63 eb bc 6d ea aa da 54 f5 f6 eb 70 e4 0a ea 8c 09 df 57 f5 f7 d9 8f 15 6d f0 33 3b 6e ac 20 ce 6d de 96 5b 06 83 e8 26 87 b1 7a 2f 77 bb e2 f8 f3 9f fe fa 0f ff ed af 93 7f ad ca 6d 71 3c 17 e8 e3 ff ac 4f 3f 88 a6 4f fe fb d7 6f 45 9d 4d fe 7b 55 4d fe 0f 7e 70 9e fc 9f e2 5c 34 df 8a 5d 86 de fb 5f b4 c5 6e 82 24 56 34 93 f6 bd 98 fc 5f ff f6 1f fc 71 36 f9 f7 a2 e8 be b4 1f ed a4 3c 92 77 4e 4d fd 9f 48 48 93 a6 ae db c9 be 6e 26 0c 33 fa 1d 7d 3b e4 98 6c 04 fe 9f de db 43 75 d5 0e ff 9f 7f 9d fe 75 b5 29 d0 db 05 fa 90 ef d1 e8 13 5f 2c 8f ef 45 53 b6 3f 31 80 e9 a6 de fd b8 1e f2 e6 ad 3c a2 81 7b ca 77 b8 73 91 1e 10 e8 15 b2 7a 5d 87 64 8b c7 7e dc 16 1f 2d 06 57 cc f2 dd 7f 5e ce cc 78 48 b0 7e be 2f ae 7b 34 76 c8 6b ab fb e2 b0 66 bf 64 4f cf c5 61 82 7e 97 88 c2 c3 8c e8 2b b2 5e 0c e3 bc ef 8a 6f e5 b9 dc 54 c5 cf 53 53 50 a0 fb fc 50 56 3f 56 87 fa 58 23 4d df 16 d3 ee d3 ba 47 ba 28 0e 3f 73 61 5c a9 06 e6 67 be d9 34 7f 6b cb b6 2a fe b8 76 02 24 46 8d ba 17 cc e7 ae d8 d6 0d 11 fb 8a f4 24 96 8a 2c 09 dd 1b 93 1d 82 83 b4 d3 f5 c2 cf cd f4 dc 36 35 1a 84 84 f0 ef 94 f7 4d 5d a1 d7 7e 6e eb 5d 31 fd ba d9 4d cf f9 e1 e4 c9 f9 f9 90 57 95 d0 05 2f a8 87 ce 17 84 ed 72 12 9e 3e 3f fe b6 16 bb 79 de 3b aa

Source: global traffic	HTTP traffic detected: GET /cdn-cgi/trace HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: http://telegiraum.clubSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://telegiraum.club/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?token=ad76fbd92e6bbb HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: http://telegiraum.clubSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://telegiraum.club/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/trace HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?token=ad76fbd92e6bbb HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/font-awesome.min.css HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery-3.5.1.min.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layui-v2.6.8/layui/layui.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/download/filename.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime.d0a0d8313f8d1e00.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveOrigin: http://telegiraum.clubUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.9225875df2b05e64.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveOrigin: http://telegiraum.clubUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.7b574a882822896f.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveOrigin: http://telegiraum.clubUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills.9225875df2b05e64.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime.d0a0d8313f8d1e00.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/download/filename.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.7b574a882822896f.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layui-v2.6.8/layui/css/layui.css HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/jquery-3.5.1.min.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layui-v2.6.8/layui/css/modules/laydate/default/laydate.css?v=5.3.1 HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layui-v2.6.8/layui/css/modules/layer/default/layer.css?v=3.5.1 HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layui-v2.6.8/layui/css/modules/code.css?v=2 HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layui-v2.6.8/layui/layui.js HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/datas/countries/phoneCode.json HTTP/1.1Host: telegiraum.clubConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/logo.jpg HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.e2974b719a0acf9b.css HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/datas/countries/phoneCode.json HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/logo.jpg HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://telegiraum.club/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: telegiraum.clubConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: telegiraum.club
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@16/53@14/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,1938976502007364758,12421088361425760724,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://telegiraum.club/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,1938976502007364758,12421088361425760724,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://telegiraum.club/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
www.cloudflare.com	104.16.124.96	true	false	unknown
ipinfo.io	34.117.59.81	true	false	unknown
telegiraum.club	156.236.70.154	true	true	unknown
www.google.com	142.250.186.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://telegiraum.club/assets/layui-v2.6.8/layui/layui.js	true	unknown
http://telegiraum.club/assets/datas/countries/phoneCode.json	true	unknown
http://telegiraum.club/polyfills.9225875df2b05e64.js	true	unknown
https://www.cloudflare.com/cdn-cgi/trace	false	unknown
http://telegiraum.club/favicon.ico	true	unknown
http://telegiraum.club/assets/css/font-awesome.min.css	true	unknown
http://telegiraum.club/	true	unknown
http://telegiraum.club/assets/layui-v2.6.8/layui/css/modules/laydate/default/laydate.css?v=5.3.1	true	unknown
http://telegiraum.club/assets/layui-v2.6.8/layui/css/modules/layer/default/layer.css?v=3.5.1	true	unknown
http://telegiraum.club/assets/css/bootstrap.min.css	true	unknown
http://telegiraum.club/assets/layui-v2.6.8/layui/css/modules/code.css?v=2	true	unknown
http://telegiraum.club/runtime.d0a0d8313f8d1e00.js	true	unknown
http://telegiraum.club/assets/js/jquery-3.5.1.min.js	true	unknown
http://telegiraum.club/main.7b574a882822896f.js	true	unknown
http://telegiraum.club/styles.e2974b719a0acf9b.css	true	unknown
http://telegiraum.club/assets/layui-v2.6.8/layui/css/layui.css	true	unknown
http://telegiraum.club/assets/download/filename.js	true	unknown
https://ipinfo.io/?token=ad76fbd92e6bbb	false	unknown
http://telegiraum.club/assets/images/logo.jpg	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.236.70.154	telegiraum.club	Seychelles	133115	HKKFGL-AS-APHKKwaifongGroupLimitedHK	true
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
104.16.124.96	www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532707
Start date and time:	2024-10-13 20:25:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://telegiraum.club/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@16/53@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.174, 66.102.1.84, 142.250.74.195, 34.104.35.123, 142.250.185.234, 216.58.206.35, 172.217.18.10, 142.250.181.234, 142.250.186.170, 142.250.186.74, 142.250.185.170, 172.217.23.106, 172.217.18.106, 216.58.212.170, 142.250.186.42, 172.217.16.202, 142.250.184.202, 216.58.206.74, 142.250.186.106, 142.250.186.138, 142.250.74.202, 172.217.16.138, 4.245.163.56, 93.184.221.240, 40.69.42.241, 192.229.221.95, 13.95.31.18, 142.250.186.99
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://telegiraum.club/

Input	Output
URL: http://telegiraum.club/ Model: jbxai	{ "brands":["Telegram"], "text":"Globi", "contains_trigger_text":true, "trigger_text":"Globi", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://telegiraum.club/ Model: gemini-1.5-flash	{ "text": "Telegram Canada +1 ", "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "", "text_input_field_labels": ["", "", "", ""], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false} Google indexed: False

URL: http://telegiraum.club/ Model: jbxai	{ "phishing_score":9, "brands":"Telegram", "legit_domain":"telegram.org", "classification":"wellknown", "reasons":["The legitimate domain for Telegram is telegram.org.", "The provided URL 'telegiraum.club' does not match the legitimate domain.", "The URL contains a misspelling of 'Telegram' as 'telegiraum', which is a common phishing tactic.", "The use of the '.club' domain extension is unusual for a well-known brand like Telegram, which typically uses '.org'.", "There is no indication that 'telegiraum.club' is associated with Telegram."], "brand_matches":[false], "url_match":false, "brand_input":"Telegram", "input_fields":"unknown"}

URL: http://telegiraum.club/ Model: gemini-1.5-flash	{ "brands": ["Telegram"]} Google indexed: False
	{ "brands": ["Telegram"]} Google indexed: False
URL: http://telegiraum.club/ Model: gemini-1.5-pro-002	{ "legit_domain": "telegram.org", "classification": "wellknown", "reasons": ["The URL \"telegiraum.club\" is highly suspicious. The domain \"telegiraum.club\" is not related to the brand \"Telegram\". The correct domain is \"telegram.org\". The use of a similar-sounding domain name is a common phishing tactic to deceive users.", "The provided URL uses an unknown top-level domain \".club\", which is often used for phishing websites.", "The input fields \" (Country)\", \" (Phone Number)\", \" (Verification Code)\", and \" (Password)\" suggest a login or account creation page. This is a common target for phishing attacks, aiming to steal user credentials."], "riskscore": 10} Google indexed: False
URL: telegiraum.club Brands: Telegram Input Fields: , , ,

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 167871
Category:	downloaded
Size (bytes):	40582
Entropy (8bit):	7.994624194376481
Encrypted:	true
SSDEEP:	768:0T4EB1AU18a9IDRjBWWxII8oTb3b97WfRoXhJ0ghGcVPssFlvsyB:0vB1VT9+VQ4Hb3bcWh6ghGcVPssFlvsY
MD5:	43C5BA22F7FA4441831BFCE40FD38F1C
SHA1:	5E7BF3BAEE1A9BEF464EEC4FD9319521ABD6E362
SHA-256:	FE85D176338A0952385A471E086A2C8E30F75BDD7F9C9AE8B66AE406E80F6640
SHA-512:	D092F441C1A28324CFEEFD081F2FD5F48E76A4C0D77D03C70ED05AFE5D9E052203C4116F5B3805226A38867854AB1A21171DB75AF817268F91AE0A24823E7BF9
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/js/jquery-3.5.1.min.js
Preview:	...........iw.F.(.=.......EK.d....8..x&.b9.d(&."..b.`.PK,.o...z_@..3.<...............N...>..'7I6...%...j^te]%E5O..5....<Ywu....UGus.`Y.X.......b].f.I.'.?J.t.....K.....W.'O.&.......,.._./G.jU7]..H..$..&O.6...9.:,B.:..`/W..1D.....$..vr.e.tgM}.T.2y.4u..b....lX...eY.y..;.dCi..j.a..`p.[.p,^..Y.w.-...d..Dtr ...ge;4fv8LXx./.&..jM.C....%......j.......F-.1=8...e!W. ..r.X\|4+.Kk..m.......o.X.....{b5DC[..V...~.../........x.W..>.S...\|vV..\V\|-V...M..\8...YA.%......9.....Z_..O'.Z.....x6..9{....E.W.....%...2...........C...l.s..............__.a._.-4.Fs.x......k.b\|...{...T..M.2...Vt...H...5.J.#8.YV.:v...r@5...&.....>.....B..........$k.<..@.G.U`..b0.\X1..d...\.:......k.[.....L..J...]..3...H.0..$i..K.G2.X..T+.....A6..5..a..\|.R. R.#....7'.1..hQ.WvTD....+=s......%.N...v..vDO$...\d".....94..ope...i.........=\|..2u...v0....}..d..) P.p.K..y4ZI..<."r.....ON.c9...3~..#...>N..~.S0.6.r...p5(\y+....E..0$ 2[5^..>=I...Pf..._..N.:Tb..p.QW..E.(..ht.S........

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 27408
Category:	downloaded
Size (bytes):	5088
Entropy (8bit):	7.951491987672239
Encrypted:	false
SSDEEP:	96:44/HiwJXB3yzeaj466Raeb8kI1K+Ghgr31udejj2hRHAVoHvIw2zYoDuvCOoY:423yzz0NWZI+Ghgz1ude32ACHvIwO6vL
MD5:	FBC700D7A322B714F18498EF2706E2A0
SHA1:	BAE3291548462E284DA566700F7467BD9BAF5493
SHA-256:	879F0296CB26BC79263CD360CD88AA374970663470FAC3285FB89A2023984545
SHA-512:	C49D5DBF4F4E8345066DB847956150EF65950AC9943D170AD20EE3AAE4B20096FD88C00FA6A720EE497364FD914D6C16DEFFBB898C66D92EF9543847189DF9D7
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/css/font-awesome.min.css
Preview:	...........\Mo.8v....`0x...?.\..$. ...t.Eg..%Q%>K..%......Uu..z.^.s)~.^^^.....O...f.3u7..w.J....Yr....7..uv..gE.5/...)G.6../.d(.W...U.L...._.G_f.........x...........O...J.....y.S5..f.._..././..c...mm.2.m........+0.W...Q.....,.}.V...EU..2..M..../??..f.(...9.4..Y.C.....x......z.].}....o...;.....?....a.2.6.tc..R.j..&}=.,.....&f0h..../.PVw.i.>..Uu.......;...jG...2.+..u.e.e...V.......<..,.5.r.!.X...\|.OU........7....vE..w...l.V.>....K]x......vy.v.oWWoW.6....+\|K...F,....C.....X.../..Ff..y.r.XoTI.......6.y..H..g...Za... c..6..V...o0.1B&.).n....y..c...i..E..7........i.5tlb..".....T.....8.c...\.t.?m..?)../.Vf.o...>..e9..e...F..........JF.....q.c..1......9M=Yk.A.q:.^.n....f.........r*.U.r++..._v%=.y......u.].. ..N}}..~.gn..../M<}........1...m.......Y..<..k.:{.>.0....J..&.....tx.u(......O_..wn.j.....j...Q..D..Wx..@^.U_l...?OT.}.W....i.)u3/... ......0.....'.f...0Q.jG...+l.i..#.....j.I....r-x.............n4.i4.W.n.Q...L_..$R<...y..

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 65
Category:	dropped
Size (bytes):	191
Entropy (8bit):	6.56744389893666
Encrypted:	false
SSDEEP:	3:FttJOzXEWOlY1vWpG3kQDJhjKk4rWDmsAVtxb5MBorfLeUlZhQ7qEUa5Zz5o6/:XtwrhOlYvWo3kWJhfPKsARb5w2j3RQ2K
MD5:	60ED8F1DA58E85E5B20A51C54F92FD62
SHA1:	CF342269661AF8CE772ED5C2953885EF6038C589
SHA-256:	C1E48EF9B045D2C715A5295CCAE5CAB46E7158AC9B0EE36BB5A40DC8F44DB1D2
SHA-512:	FD87C9A08279166EC173602594F390E05C033CEF7A3F477DD5C36BA5395F8581A4F4033BB23C0B5522E76AA0A330AD29406FED39C7EBB7BB343CBF1A3E62C773
Malicious:	false
Reputation:	low
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....i[T.t.N...4.....{...e......O?K?..............S......8...\|...;[w.....v..A...

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.807528040832412
Encrypted:	false
SSDEEP:	384:jU9B3BBBBBBBBBBBBBGBBBBBBBBBBBBBBBBBBdBBBBBBBBBBBBBBBBBBBBB4BBBT:w9B3BBBBBBBBBBBBBGBBBBBBBBBBBBBw
MD5:	4C7161B2FF1DB8E15C7E47F8639C5F86
SHA1:	30260EFCDAF269977CF3E8A2280A9C6D4C93B583
SHA-256:	7E2388EC283FE17472EF02829A93DA550AF8F3AD4A975F50A0110BFF61AFE523
SHA-512:	627B5981E0BEEC62BAEFC8CAEE9E227686ADAED88FC58AAC46B68C649DD71145D64DB2D063EF8A741828244CD941FA73FD85A5D6C94D015A66C5E514B476AE6B
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................X..G<.Av.=..;..9..7..4..4..8..:..<..@..Ey.O>.g......................................................................................................................d..G+.>y.9..5..4..3..3..2..2..3..3..2..2..2..3..4..7..<..D}.S......................................................................................................k..E1.;..6..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..2..2..4..8..A..S5........................................................................................I..<..6..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..2..3..8..D..^..............................................................................A?.8..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, baseline, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	6328
Entropy (8bit):	7.922755450055567
Encrypted:	false
SSDEEP:	192:Dsj3wLNTdKtcZqopccM/UV6LXDZ541Koa6IbWUPY:DssKS+cGU0LXDTkRaXbzPY
MD5:	B6804A49A117CB8B5EB86CD489A93A36
SHA1:	3304EB19BFD257989D94D5217196C129C3244696
SHA-256:	2A1F3DE21A6685E08138C0D562DE525D765EF14999B143085E678FC4D7517A4D
SHA-512:	5926D0610FDD4A9ACA893D489D0990D55810AAE5D3E2EBCF645BDE578F699BD140A5E2BF3F0DDACF6AFA02A0A2E2366612416CCF8CEA3A0B6F72CC25B5760EF7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C......................................................................................................................@...........................!1AQa..q..."$2BCr..Rb.......#%45S...................................;.........................!1AQq...."Ra....#B...2b..r.3................?....H"A...<{..}.z..5q1PH.BL._.E..G....3...l.,.{.!.x....WL.]..w.[....HP.+.}..+[8J.'Hcp._.......I.........^v....U.K....F..6.....+9..u.(...aiW..S-.czS.4...>T...<...b:..../.....Z..BvmEss.....Q....!....,H..q;.K.'e..)8...n.....&O..".n.........@RM3.V...m.<..9.?(.LP..C..o.c.X..$....2..9..%'.O....3.h.uvF.u.....}4.X..`9H.t......aN..~.....h..y.>`....../G.\|5AC..p......O{D...g.=..;.1.X......[.`>..#.Q.J.#....H"A...E.V.ShT.bu.I9T..y.iJ.:...;F.."L.....:.Z&faJBtx..ks$.U;6.P.......R.P..t....<ZO...7.jP.d.@#.....#..o.\I....2...{.v............R.*Q7$.f' .,.nIq.....XK..D...K..D...K..E.....YJ.AJ.....

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3756
Entropy (8bit):	3.903137515353709
Encrypted:	false
SSDEEP:	96:eoJoBcALY+o7lsqsYH9CnmJcSDY3oSFvQto:ewkof91fDYYub
MD5:	19551C0B56DC31D495FC8AD9375B3044
SHA1:	6FBCAE618638A57482344C28228A1DAEDC41D4C4
SHA-256:	0CED196A8F08E4B904863D19B618BBFBC87882D8E95BEFA5B6599A9708DCA790
SHA-512:	FE3ADF1E832A7BC69E59B278A06730C94C84B72938AC88B27386E6CEAE41BCE060867437AC8236F917BEBCDD23877733AEAB2590586BB0ABBD000D5FD113D5C2
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/datas/countries/phoneCode.json
Preview:	{. "AF": "93",. "AX": "+35818",. "AL": "355",. "DZ": "213",. "AS": "+1684",. "AD": "376",. "AO": "244",. "AI": "+1264",. "AQ": "",. "AG": "+1268",. "AR": "54",. "AM": "374",. "AW": "297",. "AU": "61",. "AT": "43",. "AZ": "994",. "BS": "+1242",. "BH": "973",. "BD": "880",. "BB": "+1246",. "BY": "375",. "BE": "32",. "BZ": "501",. "BJ": "229",. "BM": "+1441",. "BT": "975",. "BO": "591",. "BQ": "599",. "BA": "387",. "BW": "267",. "BV": "",. "BR": "55",. "IO": "246",. "VG": "+1284",. "BN": "673",. "BG": "359",. "BF": "226",. "BI": "257",. "KH": "855",. "CM": "237",. "CA": "1",. "CV": "238",. "KY": "+1345",. "CF": "236",. "TD": "235",. "CL": "56",. "CN": "86",. "CX": "61",. "CC": "61",. "CO": "57",. "KM": "269",. "CK": "682",. "CR": "506",. "HR": "385",. "CU": "53",. "CW": "599",. "CY": "357",. "CZ": "420",. "CD": "243",. "DK": "45",. "DJ": "253",. "DM": "+1767",. "DO": "+1809 and 1829",. "TL": "670",. "EC": "593",. "EG": "20"

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13980, version 1.0
Category:	downloaded
Size (bytes):	13980
Entropy (8bit):	7.982662290564627
Encrypted:	false
SSDEEP:	384:xE1ZUpMQcRcGQO/z6vwr1/4UcKURb5nbC5n:x+OcKGpz6vwrB4cURBQ
MD5:	B7D6B48D8D12946DC808FF39AED6C460
SHA1:	3F18028A04B3FB39BB1CC33DCE401D04E9207970
SHA-256:	D4AE5188A65370ECFE28F42293BBEE8297CFD5712C6AADFDB270D48F2BCD88B0
SHA-512:	7C719A3026913201C92129F92B5C08BBE4344FC9C3B2D95445A3EC23974ACC7DE4555177145DFB8AE007572D03038FB3461E62654C386A60DDF32B0608EDBD7A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2
Preview:	wOF2......6.......n...6C..........................z.p.`..D.....h.....B..6.$..v. .....E..^E......`......E.....L.2.].).=..%.C.d"Jw...n..Y5...m....K,q...u~....>....E...6...z..:Bc.......ww.7.O.04....Y.k.U+I4.f"D...,...mv...@ED..A0......E.T0".t..M..\..x........h..,...".......\|B0.ar....u$.jw..h3..wX..;n.Q+..B:OX!.I.......k..#..b..I].,.6...am.........)D....vhJ................l.....EU.".M.=QR#`......Jz.:+....cw.S.\4w_..8K.'.3..Jm..;....g....m...K..\..b...O......n.Y..........JQ}..;......Yg.L.L:..k........(.PA(.K...[wyi...J.2E...eJ.#4..F..0Q.w.....+.-..)Y(...@...o.:.p.V.....g...Z...^..r..V...\|dE...p.S...V;...0....$%@?.:..k.2...T.W...Kb....m.#m..`..V.A.;M#{....}.}n/F.2.~.b.Z..5c`x@........hOj...E.c...,...y6Kn....,)....S...IE...[......`.>!&.A.../..p..V.".....\[..._ `...#'....)L8..Q0ba...K..(.I.Ti.e.c`..........-G.2.LU...bh...sprq..._@PHX.............#.(.Y9y.E..c*U.R.Z..5k.S7N...".........{..rrq...\|..3...5.~.......#B.e..4...vprq........B...+(..TM.y.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 37755
Category:	downloaded
Size (bytes):	13209
Entropy (8bit):	7.985553524321146
Encrypted:	false
SSDEEP:	384:ws1I1zRjqypkpuXBbjRbc9IBafm7a2syZbH3NHptfxf/c+6zQs:wwI1tvpQIbem26Zb9Jtpn3Or
MD5:	18DE2674A2204A774A989A1A36933E66
SHA1:	06127D66F6172D710405877AB98BC9DC6FEC4368
SHA-256:	FD7FD9C1ABB04E925965E695000132368833BB10BB15075BEBDA9AD99B161CF0
SHA-512:	0313FB1D7311463A361FFE160EA51464C295BE26E96CE77C8B113022CB5A03CC723B1C638DF3440F00F662A6E33D5F32F6DA3F261AC0D6FE9AD01159F6119336
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/polyfills.9225875df2b05e64.js
Preview:	...........}.s..._.X)=..h....jW.F.Cq..5..I...P.$1.H..mY...n\..'yo.=.j".n4.B..[Y.ZI..^j.....#.m\..x.....a....f>.a...x.t7Y..............g.02gd......$mm...p..~..V.......e...`..N..&....p.=v:.\|h...w:M%.F.=.O.8.^.a..Vn....z?.B.........y9.z..Y3..B/...~C..n.......n..n...;.....n...8..'..L..[.A)....#\|8.E..X....?.{..X.LW..{{..........o.Q....b.fq.....V$..2.gQ.=t.......3x.M...N....a...-= ..m.....Ax`..?.):E. ... E,.....N..Y?]..c+d..a.C..}.S.....4o.."...g.Z.....A.=,g.z..Ynu.rr....{....n.(............Z.zVzqB......H$..\|....N.].....\W..s.Q...d13>ya...].2...<.o:.i.].`.......g#{j..d..D..w.......Xe...~..d....}...y..3...Y.s8..` .oA.....w...g.r....m+..9.w-Mh..N.Sjsd{..$.s..8.R.%%..KA.t..7faJS"...,....~pV.9..8...,Yo.......u:Q.H...rY..x....\P.....b...r..2....^........[......q.......?\|..dn3.....MZs.2..<].i....-D...9.../.x.......c?MY..gx..5..=..-.E..'.o..:.D.v..A.X....k)..kY.d.n.n\|.1..].........,.A.$.......:C. ..UHk......:e<.............,#-....e1......+....oI.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	307
Entropy (8bit):	5.414041663270089
Encrypted:	false
SSDEEP:	6:yzPZruX4mS1w7L+LRB2DOexWb2RhQJFtXXC3AkIhhIl/1cK2fvFive:UPfl1w3aRB2DOexWb2RKJFtHeQh41cJ1
MD5:	951C493AA9D59221185BF30DE5E7DC91
SHA1:	D7491074DCA1E0334B7876D099609FA8C61D8588
SHA-256:	695404AFC495F08DA20031A400D341D8C463C20BE7A94F5A7C643477BFA563C3
SHA-512:	CAD02608705E173B495B6CC27F294335E024CE9E98C8D0A9A9A5BB89051B42465B6D2F796A575F796126105B604D1844DED79F67A6D7E457590237260CB3960D
Malicious:	false
Reputation:	low
Preview:	fl=452f199.h=www.cloudflare.com.ip=8.46.123.33.ts=1728843988.29.visit_scheme=https.uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36.colo=EWR.sliver=none.http=http/1.1.loc=US.tls=TLSv1.3.sni=plaintext.warp=off.gateway=off.rbi=off.kex=X25519.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 530342
Category:	dropped
Size (bytes):	120092
Entropy (8bit):	7.998001764321468
Encrypted:	true
SSDEEP:	3072:Y4IEvNlLQBrYde18Mhh/Gz5cFpSZ1wF5o/hNzWnCw9DLF:YTeeTNFMXPNjw9vF
MD5:	115AADFC1EB1DF59B70881215D7BA0E5
SHA1:	154FD1141B4F2DFD8808EEE8BDB168BF0D4C1F6C
SHA-256:	2F11CD284A99F124A70E7B717F3DEF7E1D424AECF90CB7BFA2FF2EB2FECD3FF9
SHA-512:	EAD5FD663F6DD1214FFE7713721E334CA4F986A75FCDE63692D9130E0C248CFD6897461CED39EB37E8E4AEB3FFACF9039907E986F4B744851EA50C65ACFB4BFC
Malicious:	false
Reputation:	low
Preview:	...........yw.F.(..>...]..H...E....../vrc..(%."..b....l......z.H;...............I^.x..X.D.y..~..-..-.2..A..$I.H...fmz,...:.......J..\|.$.\|.!....h.....d..]..mq%.u{.L.{.....}....:....hF..cz0.;...Ht..G......o...O.=.1...:............u-..zV..V}M.....g..Q.Q.[Tu.a.{..b.`.....-Ey.^&.d.....?....g8.8m%I.H..([Q.k.&...F.......\^...W-Q........[..'....e;r=.i.4.i.......y...._YQ..........e./.x.."K..A..L...h...p@A..S.`QKh<]V....S....."...H..iy.>e.2.Y...k.Q...`G!..\....r.....4.`v...".Vr/..tZ...fm...9......zMsV.[.....u.l.<$j.r,.{..t..5..5.;..M....../......%}.?...E........W.5.c.W........j^.+....\|k.l.8...}....;.6?_.K...Kq.("U.......0..U.fo.[.dJ4.b......o.R..].e..VD.cW.-.,..z...vnG..?.....}.........^...u.0.z..... ....%..R...@.9@......!..j..`.TW.X....2y......Wuxqr.....`...]..jg<pP...8.i/:b8..j..a...F1&}..>..k.\..........xWo........`.?y...4.ex..b..O...g=.`.;.K.^...)E.H.F....O..d/..{.N.\|].{.`..?.......'o^..*.........Jv..[@7...$.....R..}.....o.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.897270223761388
Encrypted:	false
SSDEEP:	6:kXO19TgIJAuuuthkP//f4IoWzqs4jW1CAn:k+15gIOuHhA/XvoPPWf
MD5:	D362ABFA435FB75BBDCB2E194D14DC4F
SHA1:	E5DEC1FABE990767DB2966E945BF08A269130933
SHA-256:	EE7C9F0B3E011AC99A18CC6EC81AC78F25DC57CFE01CB69B99B7A45E5D8927D0
SHA-512:	88796C53A918EEE6AD6AC2BB24613EA1DC283601261A9D5712473F355FF3FDF3A2F2895273A5C41D10F57C69768729ED4E3672DAF4730DF15BF101F894C4A2EC
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/?token=ad76fbd92e6bbb
Preview:	{. "ip": "8.46.123.33",. "hostname": "static-cpe-8-46-123-33.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1587
Category:	downloaded
Size (bytes):	678
Entropy (8bit):	7.59352981220438
Encrypted:	false
SSDEEP:	12:XeolYushnKsWCPfBdEF2oXBPT6zy9WOhAHuzx2yHEP4+VVREf3j0ghFhdikJ6S3J:XaushnKsFf0PoZOzxCpV4hdiAvuXUb
MD5:	D4A2869E1E05A423F20E11F9B8F4C00F
SHA1:	779A8AF1A682992CA5C883A4D5EFD40D0A456F85
SHA-256:	6DAB1448B6A31977CEDA92E20A70732CB95F3E1D0597BE3381453F32431D7BEC
SHA-512:	908A2AE76BA62E9F0065D9B0BD0756E0286C503353FE530D42717F736C4BDD9D48CAA68182BA6F5A47A13C0F3A8ADB75A0C714427FC80715D743E26A18298718
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/layui-v2.6.8/layui/css/modules/code.css?v=2
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"..L.....i....rZ.r.=..I..fE_>J..2?..VUS.E.\|.f...-.zU....t.......$..Z...=.7...,.+...y...%.;...vS. '.{.p.u....o.."./.....z....U6...G...gyM...}1K.<.S.f....m....o/.j..Q.eEo..y......{..Q?..EIX.T....E~.......a..e.....}....e......I..?.~g.tg..O^-...m."\|.....{0y......?..e^....u.n.[.+...d.y..(...R{:....x.O.=...e.....e..^...I .EV.;..m. .i.i.....2.8......&..yQ..2.m.......Y...AP.:.7..D.^.e....[.U..#....1).K".I...s........U..to.?...@.....ad.*....3..B.1.X.x.i..,_T>d.yY4.(..4..^...Z,VU.f......w...'.y..~....t.}..lB...\|.2rD.0...`.$....`N3...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 920
Category:	downloaded
Size (bytes):	772
Entropy (8bit):	7.514793812066779
Encrypted:	false
SSDEEP:	24:XaushnKs8Kn0y0K3+Z8ZcWeBjakjwhklxrFj2YFwvkaa:XahhKw0/K6RZekHd2uw8aa
MD5:	254ED3C85386DDF2A11DD252CA7AC96C
SHA1:	71C9EDEF17940D9ABC6189A5BE7A60DDE0F0487C
SHA-256:	F6D6C8962A6E5B6475A80778F5EDBEAE5119473CF60190E127990D65C874050D
SHA-512:	EC47871985C818373FC7C1765C93A1348969EF683BC8BCBDA61555C805FD1256A262AC671B3DB81A597DB7BA87E629518A0516CB9D2343AF492FD28C59A214DA
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/runtime.d0a0d8313f8d1e00.js
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"...\|v.?Z7y.u1m?:...4....._2......r...2]n.w~1..>.......8...Y..~.Yu...u.L.q.nU.m.pjn../....._.K..aA_..YYn..Q=r./.?~.r.....}.......j.......]k...l....yUoe...f..q.//..a..'w~1>.V..7..Y......g......?.M.sj.......g~.9...........m~.lQ.w..e^_o.?;...7..V......{..fU..\|.\|{{.{........._.....t.$....i.q;.T..z.~3.l..../.%J....F...#.>s.;...........}..<$.w.o.$}xH?...........QE......U>.g.W.u....Z..MG.(.8......v~.!.~...?;...3.j.}....~L..Q;.^6jF...V....D.l.T.\|kFo.X...z<?.i.L.;..V3:'.....;..g.......g.._.W.....J".....f. .Q.Y.......{......\|...(B_\|..Q..X.Vw~.......U>Ye.'...m6........6..3?....cB.4....X.......?....3.c.H>....%w.............

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 199573
Category:	downloaded
Size (bytes):	26177
Entropy (8bit):	7.985543909842324
Encrypted:	false
SSDEEP:	768:nlZ3a/hIMsYOYR9tog2C/MK9ATzdRZdav4a4xb/Ygg6:nrqyMs5YR9t37/M3ndRZIv4dBAgt
MD5:	C50F2186BC6B5F00D9728D9E41A7E863
SHA1:	DD09EEEC9061EA55B8F61864E672C73BA16288E5
SHA-256:	9F7D6367A07C4887AA1384C71C61153E480D4911E3905AC9E84D69A3B6FB7F9C
SHA-512:	DA0421E0F76CB96B317B0483936DE5B652C67465B72E9E6CFE8F58D1175B027B27C50ADB63971C8F13A95CD5FE170EF4B629C45F71C99D9904E92017F36A1168
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/css/bootstrap.min.css
Preview:	...........{.#.. ..\|.........R...`mc............)e.$.^.Ru.g1....A2..,.......d<....Af..?..7.?..\|8.O.<.>...`.{.>.........B..,....h...........Y.....?.5........7.s....c...F?n...TW..}U7.......6...Q??/N..C.......<.T......._..7...o.yhH...}......S...v8..V.....<....$..r........d5..x...$....-.....j9...rh..#.\U.:......L....p..>6u.'..Y9.....G..\|..-?..U6-..?z^o....cS~.......U.P.G.Q9..N4.].\|..p...}.C,...>.,.7...f.l........$...@..V.U).:.....x<l....0.>=..z.tr.8ovdP....fK8..s...=.C.ju .W.n...?....Q.Y=...hF...h......K.7.....\?.......=A..5...\| ..G..T.7............%.{?..&...D....=4........$.'?..-..;....].....\.u:...D....%...z.%\....K..t.'...E...a....Qr.9<5.2c.Z?.18...o~..?....P..D'?.....lN....i....!3.O.1..y.em...@>.7D.u.]s......z.qs&..r...~Y...D[..o...&.L'.K....'{.yS....!c...)O.....<..#.:....g.....b.>6....7.rCZ..O..9..E{TmN.-...l-?2.C...#..q...ot..?S...\....w[.z..z....?.u..;.......!#..;..Y..x8D......o.,/.9}.F.$#Gd..Wg.lQ.?R..+9..H...r......w..

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 17456
Category:	downloaded
Size (bytes):	4173
Entropy (8bit):	7.926801457066257
Encrypted:	false
SSDEEP:	96:KbKS1T2e0U16HCbz5GQncdVEnqCQjIcbhoIm:K2S1CfUnG2cdqqCQjL9oIm
MD5:	B67D2B7B3514E344FC7D4E9DBC2E05B2
SHA1:	B0756B6AB1DE213778FF2A6E89556E86DE058DB3
SHA-256:	7F9415D03C85A9D8C56ED9BDF126DC69DDBCF78F8D82BCF35EE6733A77FB696D
SHA-512:	D4C19E04D00D1AE0AB0B4680A1EF21534E2B475995031898468ED08F5D8C9F672CC969CB7C5E4373EB3C22D443D59D5E7DECD70071C319E9297B0352C1B1FB21
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/layui-v2.6.8/layui/css/modules/layer/default/layer.css?v=3.5.1
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?".ev............%...M...m6I......f.-.-.._..i..k...>/..Gi^..).C..j^..6.=......V../I.y.(..'@.b.4..a.fE...2..U..mQ-.....u.^..v.(.}x.p..!..u0m..L0u..w...~.......-.._.....m....V.G...,..V.5X.....s...s........w.:o.BbkVM...r<.f......[i.~.~.z.......U>y[.i.n.uE...xD...st.H......D.Y}Q....U6..{..$......r.=..~.....9.1].-h....H.l.fR.3.S..5QqOz.T.t....;.?.Jkb..Q.........yl.z...N.:/.............b...d....._vq.%...2T........RV.L0..~...r._..m./..;..H8.e.].<k.......i..J./........].].1+........">..e..Jy.$..'e5}.r}.......Z...;qw[L.r;+...H..>.......2...-...@8.....y........wEj.h.{~..(iz..r5....vh... .......r..#......p........(~ C... N..?-..w-.2...mAn......7..-...i..> ....4..aFJ.....e..l]./............@x._..."oRArBD..gKB.`....3.G.O...!...9.j"@Cl.o.......}E...]...`...@./~...go@.f.._.V.6.h.../....m..p..3\|.L..$b=..U,.aS.3jA......l..................x<..777..!...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	4.897270223761388
Encrypted:	false
SSDEEP:	6:kXO19TgIJAuuuthkP//f4IoWzqs4jW1CAn:k+15gIOuHhA/XvoPPWf
MD5:	D362ABFA435FB75BBDCB2E194D14DC4F
SHA1:	E5DEC1FABE990767DB2966E945BF08A269130933
SHA-256:	EE7C9F0B3E011AC99A18CC6EC81AC78F25DC57CFE01CB69B99B7A45E5D8927D0
SHA-512:	88796C53A918EEE6AD6AC2BB24613EA1DC283601261A9D5712473F355FF3FDF3A2F2895273A5C41D10F57C69768729ED4E3672DAF4730DF15BF101F894C4A2EC
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.33",. "hostname": "static-cpe-8-46-123-33.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.301804026733389
Encrypted:	false
SSDEEP:	3:OzPMEoSvVbjJiY:OzPrvVbB
MD5:	7C9B4413EC2C2F6152742F79374F72E6
SHA1:	AC4B8CB311051FDBDF3E47B6077F3E8F820BB5BC
SHA-256:	4E60DD8D9D5B87624A480951278A281802D9E31EC3CC022A433D020F92CFE767
SHA-512:	F814BBD14FE60621A852D1028BEDCDE3279732F6B82FBE8C629521BC210F45D897133BD312F25CF5A43416098CFC4E31EF639194B2A84ECD166808A38EB603D8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQm_q9eBoMVQphIFDXVfuUESBQ1b60h8EgUNUqWY3hIFDXyAUzU=?alt=proto
Preview:	CiQKBw11X7lBGgAKBw1b60h8GgAKBw1SpZjeGgAKBw18gFM1GgA=

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.807528040832412
Encrypted:	false
SSDEEP:	384:jU9B3BBBBBBBBBBBBBGBBBBBBBBBBBBBBBBBBdBBBBBBBBBBBBBBBBBBBBB4BBBT:w9B3BBBBBBBBBBBBBGBBBBBBBBBBBBBw
MD5:	4C7161B2FF1DB8E15C7E47F8639C5F86
SHA1:	30260EFCDAF269977CF3E8A2280A9C6D4C93B583
SHA-256:	7E2388EC283FE17472EF02829A93DA550AF8F3AD4A975F50A0110BFF61AFE523
SHA-512:	627B5981E0BEEC62BAEFC8CAEE9E227686ADAED88FC58AAC46B68C649DD71145D64DB2D063EF8A741828244CD941FA73FD85A5D6C94D015A66C5E514B476AE6B
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................X..G<.Av.=..;..9..7..4..4..8..:..<..@..Ey.O>.g......................................................................................................................d..G+.>y.9..5..4..3..3..2..2..3..3..2..2..2..3..4..7..<..D}.S......................................................................................................k..E1.;..6..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..2..2..4..8..A..S5........................................................................................I..<..6..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..2..3..8..D..^..............................................................................A?.8..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 530342
Category:	downloaded
Size (bytes):	120092
Entropy (8bit):	7.998001764321468
Encrypted:	true
SSDEEP:	3072:Y4IEvNlLQBrYde18Mhh/Gz5cFpSZ1wF5o/hNzWnCw9DLF:YTeeTNFMXPNjw9vF
MD5:	115AADFC1EB1DF59B70881215D7BA0E5
SHA1:	154FD1141B4F2DFD8808EEE8BDB168BF0D4C1F6C
SHA-256:	2F11CD284A99F124A70E7B717F3DEF7E1D424AECF90CB7BFA2FF2EB2FECD3FF9
SHA-512:	EAD5FD663F6DD1214FFE7713721E334CA4F986A75FCDE63692D9130E0C248CFD6897461CED39EB37E8E4AEB3FFACF9039907E986F4B744851EA50C65ACFB4BFC
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/layui-v2.6.8/layui/layui.js
Preview:	...........yw.F.(..>...]..H...E....../vrc..(%."..b....l......z.H;...............I^.x..X.D.y..~..-..-.2..A..$I.H...fmz,...:.......J..\|.$.\|.!....h.....d..]..mq%.u{.L.{.....}....:....hF..cz0.;...Ht..G......o...O.=.1...:............u-..zV..V}M.....g..Q.Q.[Tu.a.{..b.`.....-Ey.^&.d.....?....g8.8m%I.H..([Q.k.&...F.......\^...W-Q........[..'....e;r=.i.4.i.......y...._YQ..........e./.x.."K..A..L...h...p@A..S.`QKh<]V....S....."...H..iy.>e.2.Y...k.Q...`G!..\....r.....4.`v...".Vr/..tZ...fm...9......zMsV.[.....u.l.<$j.r,.{..t..5..5.;..M....../......%}.?...E........W.5.c.W........j^.+....\|k.l.8...}....;.6?_.K...Kq.("U.......0..U.fo.[.dJ4.b......o.R..].e..VD.cW.-.,..z...vnG..?.....}.........^...u.0.z..... ....%..R...@.9@......!..j..`.TW.X....2y......Wuxqr.....`...]..jg<pP...8.i/:b8..j..a...F1&}..>..k.\..........xWo........`.?y...4.ex..b..O...g=.`.;.K.^...)E.H.F....O..d/..{.N.\|].{.`..?.......'o^..*.........Jv..[@7...$.....R..}.....o.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 97951
Category:	downloaded
Size (bytes):	15097
Entropy (8bit):	7.984031008056872
Encrypted:	false
SSDEEP:	384:iUYK2W8HUZOqYkVpS1c03YDktMImRRdQ1Zo:iVCpZfSOytMZbOZo
MD5:	2DE4A89BB500CC39717AD46460222858
SHA1:	8F7AB07B2F45160C55821C7A26A5A36D1B197CFF
SHA-256:	1CA4D27754A35081A59F594C6953AE0307980918C777519D344D36EC349CC304
SHA-512:	0E349F054FD83EB1E0F04DDF7781A495F50D65FB6030267419B31BE17F7592A52AD4D2AC2FB6C2573BF8B152E6C7179FF4786F72B5523642C77581FC710D2A45
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/layui-v2.6.8/layui/css/layui.css
Preview:	...........}k..8.........t.,?3+.o..;3{.s.;........-.$Wf.F..#)R"A....{..S9)..I..@....k1-.eq..(NO...b2...E\|y.t....}x/>\|...e.4+.....T..e.......8....s.o!.-...w....9/....d.$.\|v....R.vUY../.......D...1..y.?....SV...K..mQ...y.....x.U..Q"GV......qr.c..v-..S..........UY........+/.K.#....\|.B......JLu.-...nW._..&/.]..OO..k.......\.s.<1...EK\|<5....EV.v.............(~.._{...O....../WQ.,.D...K-`..J...Y..jk.._\..9e.Sq.3.........P..2=..(%.L5..O..mr?......1.I:......vSym.(.....mU..pP..}Y4.i?.....3cU..(.K#......K.3...Y.M.;K..:.klk.U.......W!?t36 q.t.NE...1.........\|mX....ML.j..X.....$^N.....~P.J...T.7.O..8.A........R\..........y.Y.........y.1.Kt..........-&.....O....9;V'...u....&;7b.......`C.D..P.M...V..U.f...m%..$ ..MU...y....<.PD....>H.9.E3z.:z..3...:....^..X...N.E.fm....~....r..s....3.x.._M..K.ER.....bW...V..g)....5.\$}.c....~\|..m....q...4y.bI.^D[.04.....k .~.BB.=...@...J.n.......T.Z]^l>...>k...z.)...:..n$..mf.V...*.v...lG.......G..y.x-.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	307
Entropy (8bit):	5.409228682608374
Encrypted:	false
SSDEEP:	6:yYg+ruX4mSsW7L+LRB2DOexWb2RhQJFtXXC3AkIhhIl/1cK2fvFive:TgClsW3aRB2DOexWb2RKJFtHeQh41cJ1
MD5:	4C0D2B224CFA643C35030F649F9E1D3D
SHA1:	0ED3E3BC5ED0C4F302437E7255160172CB4EE098
SHA-256:	F44EE671C0CE74A3DF4191557AE83AC1FAFBAA50502F0405744C682FF59C8CE3
SHA-512:	C7F6FC60004B656B7AC7AFE92D4C20479011CBD0B5208873F70BD73297507F224A9B0FE8C47E368B0F54E93DDDD845D59AEC658A2444172B9F9C6C934E97E7DE
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/cdn-cgi/trace
Preview:	fl=386f79.h=www.cloudflare.com.ip=8.46.123.33.ts=1728843987.595.visit_scheme=https.uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36.colo=EWR.sliver=none.http=http/1.1.loc=US.tls=TLSv1.3.sni=plaintext.warp=off.gateway=off.rbi=off.kex=X25519.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, baseline, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	6328
Entropy (8bit):	7.922755450055567
Encrypted:	false
SSDEEP:	192:Dsj3wLNTdKtcZqopccM/UV6LXDZ541Koa6IbWUPY:DssKS+cGU0LXDTkRaXbzPY
MD5:	B6804A49A117CB8B5EB86CD489A93A36
SHA1:	3304EB19BFD257989D94D5217196C129C3244696
SHA-256:	2A1F3DE21A6685E08138C0D562DE525D765EF14999B143085E678FC4D7517A4D
SHA-512:	5926D0610FDD4A9ACA893D489D0990D55810AAE5D3E2EBCF645BDE578F699BD140A5E2BF3F0DDACF6AFA02A0A2E2366612416CCF8CEA3A0B6F72CC25B5760EF7
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/images/logo.jpg
Preview:	......JFIF.....`.`.....C....................................................................C......................................................................................................................@...........................!1AQa..q..."$2BCr..Rb.......#%45S...................................;.........................!1AQq...."Ra....#B...2b..r.3................?....H"A...<{..}.z..5q1PH.BL._.E..G....3...l.,.{.!.x....WL.]..w.[....HP.+.}..+[8J.'Hcp._.......I.........^v....U.K....F..6.....+9..u.(...aiW..S-.czS.4...>T...<...b:..../.....Z..BvmEss.....Q....!....,H..q;.K.'e..)8...n.....&O..".n.........@RM3.V...m.<..9.?(.LP..C..o.c.X..$....2..9..%'.O....3.h.uvF.u.....}4.X..`9H.t......aN..~.....h..y.>`....../G.\|5AC..p......O{D...g.=..;.1.X......[.`>..#.Q.J.#....H"A...E.V.ShT.bu.I9T..y.iJ.:...;F.."L.....:.Z&faJBtx..ks$.U;6.P.......R.P..t....<ZO...7.jP.d.@#.....#..o.\I....2...{.v............R.*Q7$.f' .,.nIq.....XK..D...K..D...K..E.....YJ.AJ.....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 167871
Category:	dropped
Size (bytes):	40582
Entropy (8bit):	7.994624194376481
Encrypted:	true
SSDEEP:	768:0T4EB1AU18a9IDRjBWWxII8oTb3b97WfRoXhJ0ghGcVPssFlvsyB:0vB1VT9+VQ4Hb3bcWh6ghGcVPssFlvsY
MD5:	43C5BA22F7FA4441831BFCE40FD38F1C
SHA1:	5E7BF3BAEE1A9BEF464EEC4FD9319521ABD6E362
SHA-256:	FE85D176338A0952385A471E086A2C8E30F75BDD7F9C9AE8B66AE406E80F6640
SHA-512:	D092F441C1A28324CFEEFD081F2FD5F48E76A4C0D77D03C70ED05AFE5D9E052203C4116F5B3805226A38867854AB1A21171DB75AF817268F91AE0A24823E7BF9
Malicious:	false
Reputation:	low
Preview:	...........iw.F.(.=.......EK.d....8..x&.b9.d(&."..b.`.PK,.o...z_@..3.<...............N...>..'7I6...%...j^te]%E5O..5....<Ywu....UGus.`Y.X.......b].f.I.'.?J.t.....K.....W.'O.&.......,.._./G.jU7]..H..$..&O.6...9.:,B.:..`/W..1D.....$..vr.e.tgM}.T.2y.4u..b....lX...eY.y..;.dCi..j.a..`p.[.p,^..Y.w.-...d..Dtr ...ge;4fv8LXx./.&..jM.C....%......j.......F-.1=8...e!W. ..r.X\|4+.Kk..m.......o.X.....{b5DC[..V...~.../........x.W..>.S...\|vV..\V\|-V...M..\8...YA.%......9.....Z_..O'.Z.....x6..9{....E.W.....%...2...........C...l.s..............__.a._.-4.Fs.x......k.b\|...{...T..M.2...Vt...H...5.J.#8.YV.:v...r@5...&.....>.....B..........$k.<..@.G.U`..b0.\X1..d...\.:......k.[.....L..J...]..3...H.0..$i..K.G2.X..T+.....A6..5..a..\|.R. R.#....7'.1..hQ.WvTD....+=s......%.N...v..vDO$...\d".....94..ope...i.........=\|..2u...v0....}..d..) P.p.K..y4ZI..<."r.....ON.c9...3~..#...>N..~.S0.6.r...p5(\y+....E..0$ 2[5^..>=I...Pf..._..N.:Tb..p.QW..E.(..ht.S........

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 920
Category:	dropped
Size (bytes):	772
Entropy (8bit):	7.514793812066779
Encrypted:	false
SSDEEP:	24:XaushnKs8Kn0y0K3+Z8ZcWeBjakjwhklxrFj2YFwvkaa:XahhKw0/K6RZekHd2uw8aa
MD5:	254ED3C85386DDF2A11DD252CA7AC96C
SHA1:	71C9EDEF17940D9ABC6189A5BE7A60DDE0F0487C
SHA-256:	F6D6C8962A6E5B6475A80778F5EDBEAE5119473CF60190E127990D65C874050D
SHA-512:	EC47871985C818373FC7C1765C93A1348969EF683BC8BCBDA61555C805FD1256A262AC671B3DB81A597DB7BA87E629518A0516CB9D2343AF492FD28C59A214DA
Malicious:	false
Reputation:	low
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"...\|v.?Z7y.u1m?:...4....._2......r...2]n.w~1..>.......8...Y..~.Yu...u.L.q.nU.m.pjn../....._.K..aA_..YYn..Q=r./.?~.r.....}.......j.......]k...l....yUoe...f..q.//..a..'w~1>.V..7..Y......g......?.M.sj.......g~.9...........m~.lQ.w..e^_o.?;...7..V......{..fU..\|.\|{{.{........._.....t.$....i.q;.T..z.~3.l..../.%J....F...#.>s.;...........}..<$.w.o.$}xH?...........QE......U>.g.W.u....Z..MG.(.8......v~.!.~...?;...3.j.}....~L..Q;.^6jF...V....D.l.T.\|kFo.X...z<?.i.L.;..V3:'.....;..g.......g.._.W.....J".....f. .Q.Y.......{......\|...(B_\|..Q..X.Vw~.......U>Ye.'...m6........6..3?....cB.4....X.......?....3.c.H>....%w.............

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 265985
Category:	downloaded
Size (bytes):	24726
Entropy (8bit):	7.98876430630124
Encrypted:	false
SSDEEP:	768:1hD+CzT88BgA08eNIK389nuWiXlxgmnqDwMWJTd:vDlng78k380HXlCmkuJTd
MD5:	2D1DC90776ACD60B44EED71A6615EA82
SHA1:	797C5D0CD321421C1ADABB619269F31AEE0E8E5F
SHA-256:	C941CA4420F707799A83E5BD52C31AA65497BDDC9CEEEE852ECE78E2FE39D90B
SHA-512:	EAC434D30F13EAB578C9678FE42CB10E16544CA3D7F3F23002B07290B9A1B9F4F47685F85B648A5EB160764BE708DBC920751E02FA636617CD6500055004C658
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/styles.e2974b719a0acf9b.css
Preview:	...........k.. .}~../.Py.........O..b.....8.d[.T.lye...u...)..+...v...f../.#.d0.mw_g.......m}l..X4S....7y.....O..........V....X..u[.V.uU.[..{Q.....\|...{.k...zT..l......n..<...dnh.....uW.O.9!.`..>...\|s..K[X0..cqU...._.z..?f.............H......c..\|..&..._wM}.B..>....@s......b.lgm~...F.n..]..m....7..5.LQ.\|[.?&..y..l..lS.Y....q..L.?..5{m5..}8;.......6...o.s;.m...D..d.vy..2.....n.m./.)._....[....O.o.(T5.Xl.b7........`5..uZV<.g.+....@}}9.......A.qm<}Hc.m..T...p.....W....m.3;n. .m.[...&..z/w............mq<.....O?..O...oE.M.{UM..~p....\4.]..._..n.$V4....._....q6......<.wNM..HH.....n&.3..};.l.....Cu.......u.)........._,..ES.?1........<..{.w.s......z].d..~...-.W....^..xH.~./.{4v.k...f.dO..a.~.....+.^...o..T..SSP...PV?V..X#M.....G.(.?sa\...g..4.k...v.$F............$..,...............65......M]..~n.]1...M........W.../......r..>?....y.;...rl.....A#(Gv......7..LZ3d~1N....Y....7..s..*...\P..<...>..oNS..)..K..L....V...vE;;..Q\.%b.R.W.?

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 65
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	6.56744389893666
Encrypted:	false
SSDEEP:	3:FttJOzXEWOlY1vWpG3kQDJhjKk4rWDmsAVtxb5MBorfLeUlZhQ7qEUa5Zz5o6/:XtwrhOlYvWo3kWJhfPKsARb5w2j3RQ2K
MD5:	60ED8F1DA58E85E5B20A51C54F92FD62
SHA1:	CF342269661AF8CE772ED5C2953885EF6038C589
SHA-256:	C1E48EF9B045D2C715A5295CCAE5CAB46E7158AC9B0EE36BB5A40DC8F44DB1D2
SHA-512:	FD87C9A08279166EC173602594F390E05C033CEF7A3F477DD5C36BA5395F8581A4F4033BB23C0B5522E76AA0A330AD29406FED39C7EBB7BB343CBF1A3E62C773
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/download/filename.js
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"....i[T.t.N...4.....{...e......O?K?..............S......8...\|...;[w.....v..A...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3756
Entropy (8bit):	3.903137515353709
Encrypted:	false
SSDEEP:	96:eoJoBcALY+o7lsqsYH9CnmJcSDY3oSFvQto:ewkof91fDYYub
MD5:	19551C0B56DC31D495FC8AD9375B3044
SHA1:	6FBCAE618638A57482344C28228A1DAEDC41D4C4
SHA-256:	0CED196A8F08E4B904863D19B618BBFBC87882D8E95BEFA5B6599A9708DCA790
SHA-512:	FE3ADF1E832A7BC69E59B278A06730C94C84B72938AC88B27386E6CEAE41BCE060867437AC8236F917BEBCDD23877733AEAB2590586BB0ABBD000D5FD113D5C2
Malicious:	false
Reputation:	low
Preview:	{. "AF": "93",. "AX": "+35818",. "AL": "355",. "DZ": "213",. "AS": "+1684",. "AD": "376",. "AO": "244",. "AI": "+1264",. "AQ": "",. "AG": "+1268",. "AR": "54",. "AM": "374",. "AW": "297",. "AU": "61",. "AT": "43",. "AZ": "994",. "BS": "+1242",. "BH": "973",. "BD": "880",. "BB": "+1246",. "BY": "375",. "BE": "32",. "BZ": "501",. "BJ": "229",. "BM": "+1441",. "BT": "975",. "BO": "591",. "BQ": "599",. "BA": "387",. "BW": "267",. "BV": "",. "BR": "55",. "IO": "246",. "VG": "+1284",. "BN": "673",. "BG": "359",. "BF": "226",. "BI": "257",. "KH": "855",. "CM": "237",. "CA": "1",. "CV": "238",. "KY": "+1345",. "CF": "236",. "TD": "235",. "CL": "56",. "CN": "86",. "CX": "61",. "CC": "61",. "CO": "57",. "KM": "269",. "CK": "682",. "CR": "506",. "HR": "385",. "CU": "53",. "CW": "599",. "CY": "357",. "CZ": "420",. "CD": "243",. "DK": "45",. "DJ": "253",. "DM": "+1767",. "DO": "+1809 and 1829",. "TL": "670",. "EC": "593",. "EG": "20"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 37755
Category:	dropped
Size (bytes):	13209
Entropy (8bit):	7.985553524321146
Encrypted:	false
SSDEEP:	384:ws1I1zRjqypkpuXBbjRbc9IBafm7a2syZbH3NHptfxf/c+6zQs:wwI1tvpQIbem26Zb9Jtpn3Or
MD5:	18DE2674A2204A774A989A1A36933E66
SHA1:	06127D66F6172D710405877AB98BC9DC6FEC4368
SHA-256:	FD7FD9C1ABB04E925965E695000132368833BB10BB15075BEBDA9AD99B161CF0
SHA-512:	0313FB1D7311463A361FFE160EA51464C295BE26E96CE77C8B113022CB5A03CC723B1C638DF3440F00F662A6E33D5F32F6DA3F261AC0D6FE9AD01159F6119336
Malicious:	false
Reputation:	low
Preview:	...........}.s..._.X)=..h....jW.F.Cq..5..I...P.$1.H..mY...n\..'yo.=.j".n4.B..[Y.ZI..^j.....#.m\..x.....a....f>.a...x.t7Y..............g.02gd......$mm...p..~..V.......e...`..N..&....p.=v:.\|h...w:M%.F.=.O.8.^.a..Vn....z?.B.........y9.z..Y3..B/...~C..n.......n..n...;.....n...8..'..L..[.A)....#\|8.E..X....?.{..X.LW..{{..........o.Q....b.fq.....V$..2.gQ.=t.......3x.M...N....a...-= ..m.....Ax`..?.):E. ... E,.....N..Y?]..c+d..a.C..}.S.....4o.."...g.Z.....A.=,g.z..Ynu.rr....{....n.(............Z.zVzqB......H$..\|....N.].....\W..s.Q...d13>ya...].2...<.o:.i.].`.......g#{j..d..D..w.......Xe...~..d....}...y..3...Y.s8..` .oA.....w...g.r....m+..9.w-Mh..N.Sjsd{..$.s..8.R.%%..KA.t..7faJS"...,....~pV.9..8...,Yo.......u:Q.H...rY..x....\P.....b...r..2....^........[......q.......?\|..dn3.....MZs.2..<].i....-D...9.../.x.......c?MY..gx..5..=..-.E..'.o..:.D.v..A.X....k)..kY.d.n.n\|.1..].........,.A.$.......:C. ..UHk......:e<.............,#-....e1......+....oI.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 817373
Category:	dropped
Size (bytes):	216842
Entropy (8bit):	7.998919511627918
Encrypted:	true
SSDEEP:	6144:q16xwOOKKcKWwRpe0Dw+CvMazrJTqA/L35:5+uKWieGw+CvMwx7/l
MD5:	129F16DEF87CAFFB67B5B8BCD900CA8C
SHA1:	D4EA23172D280366685A004148F6B26D7A4AD8B8
SHA-256:	E85F0FAEE076C8D5839A40557D16C7B67CC08AC178815A649AB5BD9D8773F33B
SHA-512:	688691ACBA93BDB8B2D8DFF3EDE0787992144368A12568C97740AD7C7DD1196C2AF6F01F3E8593A97763C61E8087023DA3F897EC8528F57C8036F9CD164FE949
Malicious:	false
Reputation:	low
Preview:	................8..8.\|\.f...QjG..8.@.}P.7(.&Q..T..i...ff_.....{?...>gg.=A)...'yv..>>.\f.....U^T..2..\|.ZM.a.jY^..I..................m{Y.VY..j...J......BV."k..v.U7W2?oU.TV.O.N.4..j..n...")..:O.(....L^.r.Wr~r....<..aQ...l.&..v....,...U...Tv?.E.....y{....g;....<i}....S..Ukn.j.....Z........(9.i..l...G...e.k..e..}.tL.i~....a.......LU.B7n...A?.[7......G..j-..z-..>..n3....D.%../. .}...O...............NOd.s.....Q....W.#.....+.p..[....IQ.7....UPE.U....3Y0(.2...C7...X..e..@e.2?.S..1.R3z..... .....8M..2)C..v..,...e...n3=......f..../...eV...Y.\a..?2.f._......m$..u.w+.U~R.WA...v.....?.V......?..2j..K#...@..~..T..U.W9.>zMk...v(P..oa..0.G.4....ud...........T..^.......]..W\|..E....%6j.q&#..b...p.~.. b.Fx..XB5......g(E..a"x..B......[......f,[.,b......[.E~-.P...@G.Zex.K....(...F..y('....>\|..!.=..\|....GUqs.Ay..sv...m..\|x..WA.a(.Bw.5t.<(C..y...qT.Q.`qh.....4.;.._A...u...P.>..3.A.....w.1..\.33.p...f..iX.F#.._.u<.#..@.rp.;......7...O.v.....tW.P......

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 8730
Category:	downloaded
Size (bytes):	2345
Entropy (8bit):	7.909754438392
Encrypted:	false
SSDEEP:	48:XahhKsUdmlczAAOc8+2fYlCbwWF72cM1CVR1jLHNLFCaBX:KbKsXlckW8+ZsbwWFwClPCaR
MD5:	FBEBD8C8492CA0893E4370FA4401137D
SHA1:	DF4C91247B7173B42104E0662B1B7A327783CD0A
SHA-256:	FF8743CC5BA62CAC21EC38D6AA2D16C04304EEE70A40F5D086D45181C50C0100
SHA-512:	AE1E23ED36066D0F1D648BC94EC2079EDFA3F0D36E0FC1892C1265EE335C4A7699AD21710A3A0C09A9C354D3D09119D9EC2545BFD34D4831BF708C0EE660AA4B
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/assets/layui-v2.6.8/layui/css/modules/laydate/default/laydate.css?v=5.3.1
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?".ev=..\|......(...b......ou?....M.q.....vS..X^<...Y^o.G../I.y.(...7..i...hV...tY-.C.`U5E[T.Gi6i.r..W..?Jw..<\.....[.m.......wV.l..._...<......,..(.T.\|h ._..<...Xg.b.<J..V..W..T...}.h...-..lY,2..=[...a6.k.f.w.....^T3.dR.s4...lA.+..g..rR...l/.b.$R..=....Ni...M.Y.3.yF..b..`.m.-e.........a.{...k.Y....@Pv~w...S..i........W...Z...f[;.t.&z...A;.#Mww.pv..&(... .24-.d.0.#.9.]\....g%.X..2....-.0.....;..}.(12..f^]...e...V....Z...r{..[..8.]....l.X._.A.>.o..:....`_m. ...D..[~.>.n.W.g./......C..^.Y..Mo.U.....{.7.xo.hH.!zS/./C..Z........{;.sjj...}.>.?$..........x.yM...YY\.....j..........j%.....N......Q....>..N>...A.UU...7..........H.....M..ys..o.....;.W.S}5..(....yh9....:US..~Z.T....4/.b....I'.O..l./...@'.-.....V......o*...........m.t..g.A,H..p.M.e.\Xl..dV...n..7y.O...?.F.n..E..b..6....A.]f...h~.\...7e4I.o.....9...p.S..B`.R^.p..8...E.xF..,.....:.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 817373
Category:	downloaded
Size (bytes):	216842
Entropy (8bit):	7.998919511627918
Encrypted:	true
SSDEEP:	6144:q16xwOOKKcKWwRpe0Dw+CvMazrJTqA/L35:5+uKWieGw+CvMwx7/l
MD5:	129F16DEF87CAFFB67B5B8BCD900CA8C
SHA1:	D4EA23172D280366685A004148F6B26D7A4AD8B8
SHA-256:	E85F0FAEE076C8D5839A40557D16C7B67CC08AC178815A649AB5BD9D8773F33B
SHA-512:	688691ACBA93BDB8B2D8DFF3EDE0787992144368A12568C97740AD7C7DD1196C2AF6F01F3E8593A97763C61E8087023DA3F897EC8528F57C8036F9CD164FE949
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/main.7b574a882822896f.js
Preview:	................8..8.\|\.f...QjG..8.@.}P.7(.&Q..T..i...ff_.....{?...>gg.=A)...'yv..>>.\f.....U^T..2..\|.ZM.a.jY^..I..................m{Y.VY..j...J......BV."k..v.U7W2?oU.TV.O.N.4..j..n...")..:O.(....L^.r.Wr~r....<..aQ...l.&..v....,...U...Tv?.E.....y{....g;....<i}....S..Ukn.j.....Z........(9.i..l...G...e.k..e..}.tL.i~....a.......LU.B7n...A?.[7......G..j-..z-..>..n3....D.%../. .}...O...............NOd.s.....Q....W.#.....+.p..[....IQ.7....UPE.U....3Y0(.2...C7...X..e..@e.2?.S..1.R3z..... .....8M..2)C..v..,...e...n3=......f..../...eV...Y.\a..?2.f._......m$..u.w+.U~R.WA...v.....?.V......?..2j..K#...@..~..T..U.W9.>zMk...v(P..oa..0.G.4....ud...........T..^.......]..W\|..E....%6j.q&#..b...p.~.. b.Fx..XB5......g(E..a"x..B......[......f,[.,b......[.E~-.P...@G.Zex.K....(...F..y('....>\|..!.=..\|....GUqs.Ay..sv...m..\|x..WA.a(.Bw.5t.<(C..y...qT.Q.`qh.....4.;.._A...u...P.>..3.A.....w.1..\.33.p...f..iX.F#.._.u<.#..@.rp.;......7...O.v.....tW.P......

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 111307
Category:	downloaded
Size (bytes):	31950
Entropy (8bit):	7.986211601337533
Encrypted:	false
SSDEEP:	768:hlT+G2rz+xk+EgX+sWcmmHvWh9gyaPAF1HFAfx05C6cdYzyN:hlTfSbdzQWh6Z0d0bY2
MD5:	C455A1E4A4768D86935798028CABC554
SHA1:	9ED1E43C4FC6E4FBE2A95ED3FC60EF1504167346
SHA-256:	961B466DC34E3A041458BA7FB2B015D8C8C8769B2D716072DAB7B05F417993A4
SHA-512:	57B2C9714FD24B989E36B1CDC9229DC108DBF2E0C2143E77A723C99AAD5567C0788A5189873943940CD386E777FC44D576D2AE1E5BD77A7C74B6608996F2F397
Malicious:	false
Reputation:	low
URL:	http://telegiraum.club/
Preview:	...........K.>Iz..S.g#;._....i..Zn.CGK.dm..:.4..u.<..,Y@p.@.;v......._.a.W...{.r`..>D.k.E]o.....y......k........+.......+...'_...{...?...o~G..y.....~......G..o.o...?.....O.~...........?..{......._.....o....\|...~..;.._....'j.._....U...o...~..?.?.....y..g_}}}..p._......9....~..O........._..?.O..?.{.......g..O......O..?..................._....o....?.G....'...N}...\|,...........W>.............}....~..O..'_._~.;_.~.o..S=..?.?.?.......?}..._...z.O....O.....?...~..O?}........._.._\|..W?.g...o._../.....o..../~..O...W[.\|../o....O..........?<..=...._........~.>..x.w....?._.3?.........__\|../......O......._...j.>.../....+.O...q.Y.............../>..o~..?l.../......w../..../.._..h.....Z..w.....C..../..B.....0..E...2>.....,......:.._S...q...YU......b..........l...3..w.<..#..x.#..K....G..W.Uc.....gu.}....n...2.-3....q.8.=...,..y]........y..2......w..g....?W.....%&.Q..5.....'.y..2.?.....'....\|...~...;...J....#......._...p.3.....o....._.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:26:23.993716002 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:23.994122028 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:23.999016047 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:23.999072075 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:23.999109030 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:23.999136925 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:23.999308109 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:24.004141092 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917644024 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917772055 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917788029 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917804003 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917819023 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917820930 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:24.917834997 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917848110 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:24.917850018 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917871952 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917886019 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917896032 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:24.917900085 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.917908907 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:24.917933941 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:24.922918081 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.922935009 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.922949076 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:24.923008919 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.025417089 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.070321083 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.140289068 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140409946 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140431881 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140456915 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140471935 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140470982 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.140491009 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140511990 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.140535116 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.140683889 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140713930 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140728951 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140758038 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.140853882 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140867949 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140885115 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.140898943 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.140942097 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.141863108 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.141879082 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.141933918 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.153251886 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.153264999 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.153352976 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.174462080 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.174695969 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.175141096 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.175497055 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.175820112 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.176136971 CEST	49744	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.179514885 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.179717064 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.180103064 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.180172920 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.180311918 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.180439949 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.180495024 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.180577993 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.180648088 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.180696964 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.180780888 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.181112051 CEST	80	49744	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.181165934 CEST	49744	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.181247950 CEST	49744	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.185240984 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.185431004 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.185688019 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.186139107 CEST	80	49744	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.494906902 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.494951010 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.494965076 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.494981050 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.494996071 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.495012045 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.495037079 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.495037079 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.495052099 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.495068073 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.495085001 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.495095015 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.495120049 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.499780893 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.499794960 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.499870062 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.499924898 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.499939919 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.499953985 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.500005007 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.500013113 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.500026941 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.500041962 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.500057936 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.500060081 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.500070095 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.500081062 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.500106096 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.501960993 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.506900072 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.592183113 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:25.592227936 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:25.592315912 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:25.592555046 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:25.592580080 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:25.706799984 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.706826925 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.706841946 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.706856012 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.706866980 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.706870079 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.706886053 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.706907988 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.706939936 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.707251072 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.707266092 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.707279921 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.707294941 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.707304001 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.707331896 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.708956003 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.713737011 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818026066 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818068027 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818100929 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818130016 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.818294048 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818344116 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818347931 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.818378925 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818411112 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818427086 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.818445921 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818478107 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.818492889 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.819195032 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.819228888 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.819251060 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:25.819262028 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:25.819313049 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.259679079 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259723902 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259757996 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259788036 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.259790897 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259826899 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259850979 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.259857893 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259891033 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259908915 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.259922028 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259957075 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.259967089 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260015965 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260047913 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260061026 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260078907 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260111094 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260123968 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260145903 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260178089 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260190010 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260210991 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260241985 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260251999 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260274887 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260307074 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260318041 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260338068 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260370016 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260375023 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260401011 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260432959 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260445118 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260464907 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260497093 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260505915 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260528088 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260559082 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260567904 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260592937 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260623932 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260632992 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260653973 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260687113 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260696888 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260791063 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260821104 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260852098 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260884047 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260905027 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260915995 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260931969 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.260946989 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.260979891 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261003017 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261013985 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261048079 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261079073 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261091948 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261111975 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261126041 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261142969 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261152983 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261178017 CEST	80	49744	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261209965 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261243105 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261322975 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261354923 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261385918 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261399984 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261399984 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261421919 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261452913 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261485100 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261503935 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261512995 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261545897 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261579990 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261581898 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261612892 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261666059 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.261666059 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261861086 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.261918068 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.264607906 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.264661074 CEST	80	49744	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.264681101 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.264709949 CEST	49744	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267208099 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267256975 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267272949 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267302036 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267335892 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267379045 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267497063 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267512083 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267549992 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267554998 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267570972 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267586946 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267601967 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267610073 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267637968 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267817020 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267843962 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267859936 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267874002 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267899990 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.267908096 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267925024 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.267965078 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268091917 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268124104 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268140078 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268162012 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268167973 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:26.268177032 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268186092 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268256903 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268492937 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268510103 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268543959 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268552065 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268559933 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268575907 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268589973 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268590927 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268630028 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268834114 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268850088 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268867016 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268889904 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268906116 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.268940926 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268956900 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.268999100 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.269399881 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:26.269418955 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:26.269455910 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.269471884 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.269499063 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.269514084 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.269547939 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.269563913 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.269581079 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.269586086 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.269617081 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.270370007 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.270436049 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.270452023 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.270483017 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.270553112 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.270569086 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.270585060 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.270596981 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.270627975 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.270643950 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:26.270711899 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:26.271442890 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.271466017 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.271481991 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.271496058 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.271512032 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.271526098 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.271529913 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.271559000 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.271574974 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.272346020 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272361040 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272396088 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272408962 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.272411108 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272437096 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272448063 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.272450924 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272488117 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.272849083 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272887945 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272902012 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272917032 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.272933006 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273008108 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273040056 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273339033 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273354053 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273370981 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273382902 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273405075 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273415089 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273438931 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273453951 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273468971 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273475885 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273505926 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273533106 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273549080 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273597956 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.273854017 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.273994923 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.274043083 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.274118900 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.274245977 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.274269104 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.274287939 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.274306059 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.280775070 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:26.280888081 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:26.281474113 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281500101 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281523943 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281564951 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.281585932 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.281820059 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281852961 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281887054 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281899929 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.281912088 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.281960011 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.282327890 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.282370090 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.282394886 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.282419920 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.282421112 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.282444000 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.282465935 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.283185005 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.283210039 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.283235073 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.283237934 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.283260107 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.283287048 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.283329964 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.283329964 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.284481049 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.284538984 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.286468983 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.286679983 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.286731005 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.286787033 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.286819935 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.286830902 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.286830902 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.317214012 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.317224026 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.328416109 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328589916 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328622103 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328636885 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.328646898 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328661919 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328677893 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328684092 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.328695059 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328720093 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.328744888 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328761101 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328775883 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328783035 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.328792095 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328840971 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.328880072 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328893900 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.328913927 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.334353924 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:26.334372997 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:26.334397078 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.372384071 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.380974054 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.381181002 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:26.415169001 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.444863081 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.445172071 CEST	49747	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.445287943 CEST	49748	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.449841976 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.449934959 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.450159073 CEST	80	49747	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.450206041 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.450222015 CEST	49747	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.450326920 CEST	49747	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.450670004 CEST	80	49748	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.450720072 CEST	49748	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.450817108 CEST	49748	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.450970888 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451041937 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451076031 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451092958 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451107979 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451141119 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451157093 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451172113 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451188087 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451203108 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451215029 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451268911 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451271057 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451284885 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451312065 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451328039 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451344013 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451359034 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451375961 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451390028 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451406002 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451416969 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451420069 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451457977 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451472998 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451524019 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451539040 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451560974 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451623917 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451637983 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451653004 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451662064 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451689959 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451850891 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451865911 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451883078 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451903105 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.451973915 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.451989889 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452004910 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452013016 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452019930 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452033997 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452040911 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452075005 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452142954 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452157974 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452189922 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452192068 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452203989 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452218056 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452231884 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452239990 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452248096 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452275991 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452277899 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452291965 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452312946 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452553034 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452567101 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452591896 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452600956 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452615023 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452630043 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452640057 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452644110 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452657938 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452666998 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452696085 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452749968 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452764034 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452779055 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452792883 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452800989 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452807903 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452821970 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452833891 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452836990 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452852011 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452864885 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.452866077 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.452888966 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.453021049 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.453035116 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.453049898 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.453058004 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.453084946 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.455240965 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.455549002 CEST	80	49747	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.455719948 CEST	80	49748	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456276894 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456290960 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456305027 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456340075 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456351042 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456366062 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456387043 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456397057 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456410885 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456439018 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456489086 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456502914 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456518888 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456528902 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456533909 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456547976 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456552982 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456588030 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456588984 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456603050 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456636906 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456691980 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456706047 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456720114 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456753969 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456949949 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456981897 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.456993103 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.456996918 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457010031 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457026005 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457032919 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.457041025 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457055092 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457062006 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.457088947 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.457129002 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457143068 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457158089 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457171917 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457178116 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.457196951 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457206011 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.457211018 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457226038 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.457245111 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.466137886 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.471054077 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.471071005 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.471178055 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.471371889 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.476267099 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.489254951 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.490545034 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.494251966 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.494849920 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.494901896 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.494915962 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.494972944 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.494987011 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.494996071 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495003939 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495021105 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495064974 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495121956 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495137930 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495166063 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495166063 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495282888 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495333910 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495347977 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495363951 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495419979 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495419979 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495464087 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495490074 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495506048 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495518923 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495532990 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.495548010 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495548010 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495599031 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.495928049 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.496071100 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496085882 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496103048 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496131897 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496141911 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.496141911 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.496146917 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496164083 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496179104 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496208906 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496222019 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496222973 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.496222973 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.496293068 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.496910095 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496923923 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496938944 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.496994972 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497008085 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497020960 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497035027 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497036934 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.497036934 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.497080088 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497087002 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.497095108 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497173071 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.497821093 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497836113 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497850895 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.497876883 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.497891903 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.499876022 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.499890089 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.499959946 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.500781059 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.506095886 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.507258892 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.507318974 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.507411957 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.585587978 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.585623026 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.585639000 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.585654020 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.585701942 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.585702896 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.586397886 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.629698992 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.708570004 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708601952 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708619118 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708633900 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708648920 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708662987 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708672047 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.708672047 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.708678961 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.708722115 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709141970 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709157944 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709173918 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709189892 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709198952 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709218025 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709266901 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709281921 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709295988 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709311008 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709321022 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709326982 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709333897 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709343910 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709358931 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709372997 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709388971 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709403992 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709403992 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709455013 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.709455013 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709494114 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709507942 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.709559917 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.731012106 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.736432076 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.737786055 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.742935896 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.748867989 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.753808975 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.761603117 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:26.761636972 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:26.761774063 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:26.766180992 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.766540051 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:26.766551971 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:26.771358013 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.771421909 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.771563053 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.776469946 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806284904 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806324959 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806340933 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806369066 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806391001 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806412935 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806427956 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806448936 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806448936 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.806448936 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.806448936 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.806464911 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806500912 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806509018 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.806518078 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806533098 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.806572914 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.806572914 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.807265043 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.808594942 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:26.808836937 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:26.959433079 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:26.959472895 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:26.959625959 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:26.959861994 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:26.959878922 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.013046026 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.018028021 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.043740988 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.043766022 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.043783903 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.043823004 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.051728964 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.051753044 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.051769972 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.051779032 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.051925898 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.059948921 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.090595961 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.106436014 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.214874983 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.219865084 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.318758011 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.318789959 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.318805933 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.319001913 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.319041014 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.319096088 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.342767954 CEST	80	49747	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345372915 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345405102 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345458031 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345498085 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.345511913 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345546007 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345580101 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345602989 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.345614910 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345626116 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.345649004 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345681906 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345717907 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.345736027 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.345778942 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.350604057 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.350620031 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.350636959 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.350702047 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.355312109 CEST	80	49748	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358103991 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358118057 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358133078 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358192921 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.358222961 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358248949 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358266115 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358280897 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358292103 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.358298063 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358314991 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358319998 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.358331919 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.358340025 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.358378887 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.363210917 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.363240004 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.363255024 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.363310099 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.371553898 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371751070 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371764898 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371779919 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371803045 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371817112 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371831894 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371845961 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371846914 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.371860981 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371877909 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.371881008 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.371881008 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.371908903 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.371928930 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.376858950 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.376960993 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.376993895 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.377043962 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.390834093 CEST	49747	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.392297983 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.407943964 CEST	49748	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.407949924 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.430855989 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.436042070 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.446835041 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.472109079 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.490966082 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.491111040 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.495811939 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.506812096 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.506828070 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.508589983 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.508658886 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.534811974 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534831047 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534853935 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534868002 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534882069 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534898043 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534909964 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.534996986 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.534996986 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.540090084 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.540318966 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.541388988 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.541419983 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.562869072 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.562886953 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.562903881 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.562952042 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.562966108 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.562974930 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.563049078 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.563257933 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.563272953 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.563287973 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.563323021 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.563354015 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.563429117 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.563446999 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.563976049 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.564040899 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564091921 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564107895 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564140081 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.564161062 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564177036 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564223051 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.564897060 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564935923 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.564944029 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.564950943 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.565012932 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.565026999 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.565057039 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.565088034 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.565769911 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.565771103 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:27.565819025 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:27.565898895 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:27.566056013 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.566138029 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:27.566139936 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.566152096 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:27.576646090 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.580610037 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.580638885 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.581075907 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.581460953 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.581937075 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.581957102 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582015038 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582022905 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.582078934 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582099915 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582123995 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.582456112 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582494020 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582509041 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.582516909 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582539082 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.582566977 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.583105087 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.583137035 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.583158016 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.583175898 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.583182096 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.583204031 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.583216906 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.583792925 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.583996058 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584017038 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584050894 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584069967 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584079981 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.584093094 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584124088 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.584906101 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584939957 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584959030 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.584960938 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.584983110 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.585021973 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.586484909 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.586826086 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.586891890 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.627856970 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.639600039 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.639746904 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.639880896 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.641258955 CEST	49753	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.641288996 CEST	443	49753	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.658993006 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659023046 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659039974 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659054041 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659068108 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659075975 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.659084082 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659100056 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659121990 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659126043 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.659126043 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.659137011 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659151077 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.659152031 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.659194946 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.663939953 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.663957119 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.663971901 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.664011955 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.675412893 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.702383995 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.704143047 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.707289934 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.708982944 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.715430975 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.715485096 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.715560913 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.715754032 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:27.715769053 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:27.792350054 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792428970 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792481899 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.792484045 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792520046 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792571068 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792572975 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.792608023 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792640924 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792656898 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.792675018 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792707920 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792732954 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.792749882 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792798042 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.792948008 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.792998075 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793049097 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793050051 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793083906 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793113947 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793128967 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793149948 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793199062 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793349981 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793405056 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793438911 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793461084 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793488979 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793521881 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793543100 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793554068 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793587923 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793601990 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793833017 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793884039 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.793884039 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793920040 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.793982983 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794008017 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794040918 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794071913 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794086933 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794106007 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794156075 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794158936 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794188023 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794219971 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794238091 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794251919 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794286966 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794301987 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794843912 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794877052 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794912100 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794917107 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794964075 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.794966936 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.794996977 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.795044899 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.795046091 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.795084953 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.795120955 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.795130968 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.795149088 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.795200109 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.857116938 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.857203960 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.857283115 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.857541084 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.857575893 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.857603073 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.857618093 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.872040033 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872060061 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872076035 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872159958 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.872190952 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872208118 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872231960 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872246981 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872261047 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.872263908 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.872282028 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.872308969 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.873064041 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.873080969 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.873095989 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.873156071 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.873162985 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.873172045 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.873188972 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.873225927 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.873225927 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.873991966 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874006987 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874022007 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874083996 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874098063 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874113083 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874125004 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.874125004 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.874181986 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.874954939 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.874970913 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.875169992 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.875258923 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887507915 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887532949 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887548923 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887563944 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887579918 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887593985 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887607098 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887608051 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887609005 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887672901 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887706995 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887722969 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887737989 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887752056 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887753963 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887767076 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887801886 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887801886 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.887897968 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887912989 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887929916 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.887958050 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.888061047 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888076067 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888093948 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.888101101 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888114929 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888134003 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888171911 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.888171911 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.888221979 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888370037 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.888461113 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.916167021 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.927285910 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:27.932141066 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:27.939162016 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.939205885 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:27.939306021 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.939861059 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:27.939877987 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.002969027 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.002990961 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003005981 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003031969 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003037930 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003047943 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003063917 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003076077 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003081083 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003103018 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003125906 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003143072 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003166914 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003731012 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003772974 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003784895 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003813028 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003850937 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003905058 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003920078 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003943920 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003956079 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.003959894 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.003993988 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004053116 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004122019 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004137993 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004153013 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004158974 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004168987 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004194021 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004333973 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004369974 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004370928 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004385948 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004420996 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004458904 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004475117 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004489899 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004514933 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004698038 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004722118 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004738092 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004740000 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004772902 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004812002 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004827976 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004842043 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004857063 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004865885 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.004980087 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.004993916 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005007029 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005007982 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005029917 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005033970 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005069017 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005350113 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005377054 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005393028 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005414009 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005485058 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005500078 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005515099 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005521059 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005530119 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005549908 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005686998 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005702019 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005717039 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005726099 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005731106 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005748034 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005754948 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005764008 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005779028 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005784035 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.005795002 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.005816936 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006269932 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006320953 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006321907 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006339073 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006371975 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006376028 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006386995 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006402016 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006424904 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006553888 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006570101 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006584883 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006599903 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006612062 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006614923 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006623983 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006632090 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006669998 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.006694078 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006711006 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.006730080 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.007952929 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.007980108 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.007994890 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008001089 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.008011103 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008030891 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.008035898 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008050919 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008073092 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008076906 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.008089066 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008104086 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008114100 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.008121967 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.008147955 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.014180899 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.014198065 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.014215946 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.014230013 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.014238119 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.014265060 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.020507097 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.020536900 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.020551920 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.020581007 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.048868895 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.049096107 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.049104929 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.050165892 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.050230026 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.051275969 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.051337004 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.051476002 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.051484108 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.054189920 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.069381952 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.088458061 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088490009 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088512897 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088527918 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.088529110 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088546038 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088562012 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088574886 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.088579893 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088597059 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.088803053 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088825941 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088840008 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.088840961 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088856936 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088872910 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088874102 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.088890076 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.088908911 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.097381115 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097419024 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097435951 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097465992 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.097568989 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097584963 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097600937 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097613096 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.097619057 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097635984 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097651005 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.097651958 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.097675085 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.099519968 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.132566929 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.148063898 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.180655003 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.180871010 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.180912018 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.183346033 CEST	49755	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.183353901 CEST	443	49755	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.193980932 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.196387053 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.196394920 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.197324991 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.197382927 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.212625027 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212644100 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212723017 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212779045 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.212785006 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212826967 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212841988 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212857008 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.212879896 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.212882042 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212897062 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212913036 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212924957 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.212937117 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.212965965 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213016987 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213032007 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213047981 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213062048 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213073969 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213108063 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213144064 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213157892 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213174105 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213222027 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213299990 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213315964 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213335991 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213346004 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213376999 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213417053 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213429928 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213443041 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213459015 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213470936 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213474035 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213489056 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.213494062 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.213532925 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.215563059 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.215753078 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.215868950 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.238468885 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238542080 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238557100 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238573074 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238578081 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.238589048 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238612890 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.238643885 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238658905 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238679886 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.238770962 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238785028 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238800049 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238806009 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.238816023 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.238838911 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.241596937 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.241636992 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.241729975 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.242161036 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.242173910 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.257416964 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.257424116 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.286415100 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.303066015 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.336374998 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.336627960 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.336675882 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.337594986 CEST	49756	443	192.168.2.4	104.16.124.96
Oct 13, 2024 20:26:28.337608099 CEST	443	49756	104.16.124.96	192.168.2.4
Oct 13, 2024 20:26:28.516865969 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.516930103 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.516973019 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.516983032 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517016888 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517051935 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517064095 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.517085075 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517117977 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517126083 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.517152071 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517191887 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.517462015 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517524958 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517570972 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.517575026 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517611980 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517643929 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517652988 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.517678022 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517714977 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.517715931 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.518297911 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518346071 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.518352985 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518407106 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518440008 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518451929 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.518471956 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518505096 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518534899 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.518539906 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.518580914 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.519160986 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.519217968 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.519251108 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.519265890 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.519285917 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.519330025 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.638597965 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.638725996 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:28.639931917 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:28.639945984 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.640292883 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.641186953 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:28.683423042 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.730099916 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730129004 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730145931 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730160952 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730175018 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730189085 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730205059 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730206966 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730278015 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730293036 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730298996 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730504990 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730519056 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730531931 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730534077 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730575085 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730752945 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730767012 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730781078 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730813026 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730813026 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730846882 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730860949 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730875015 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730889082 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730904102 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.730916023 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.730920076 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.731014967 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.731532097 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.731616020 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.731645107 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.745287895 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.745618105 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.745649099 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.747133970 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.747497082 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.747497082 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.747581005 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.747872114 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.747891903 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.786623001 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.804547071 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.881747961 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.882021904 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.883588076 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.883893967 CEST	49758	443	192.168.2.4	34.117.59.81
Oct 13, 2024 20:26:28.883928061 CEST	443	49758	34.117.59.81	192.168.2.4
Oct 13, 2024 20:26:28.899561882 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.899600029 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.899701118 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.943208933 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.943223000 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.943236113 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.943303108 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.943419933 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.943491936 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.943545103 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:28.943573952 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.947118998 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:28.968993902 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.969079018 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.972693920 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:28.972769976 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:28.972769976 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 13, 2024 20:26:28.972794056 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:28.972805977 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 13, 2024 20:26:29.276621103 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.276664972 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.276741982 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.277003050 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.277038097 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.277048111 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.277070999 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.277102947 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.277138948 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.277151108 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.280612946 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.284609079 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.289452076 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.593585968 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.593609095 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.593625069 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.593641043 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.596627951 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.800779104 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.800812006 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.800827980 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.800843000 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.800858974 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.801022053 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.801022053 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.801110983 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.801162958 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.801486015 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.848622084 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:29.895116091 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:29.942403078 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:30.008369923 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:30.008399010 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:26:30.008582115 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:26:34.885597944 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 13, 2024 20:26:34.885694981 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 13, 2024 20:26:36.140043974 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:36.140203953 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:36.140408039 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:36.507972956 CEST	49745	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:26:36.508004904 CEST	443	49745	142.250.186.100	192.168.2.4
Oct 13, 2024 20:26:39.132040024 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 13, 2024 20:26:39.137726068 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 13, 2024 20:26:39.137897015 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 13, 2024 20:27:10.833597898 CEST	49735	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:10.838610888 CEST	80	49735	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:11.271114111 CEST	49744	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:11.276366949 CEST	80	49744	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:12.052515984 CEST	49736	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:12.057787895 CEST	80	49736	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:12.068116903 CEST	49743	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:12.073016882 CEST	80	49743	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:12.343027115 CEST	49741	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:12.348404884 CEST	80	49741	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:12.349369049 CEST	49747	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:12.354840040 CEST	80	49747	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:12.367106915 CEST	49748	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:12.372018099 CEST	80	49748	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:13.021230936 CEST	49750	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:13.026607990 CEST	80	49750	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:13.224370003 CEST	49749	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:13.315347910 CEST	80	49749	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:13.958749056 CEST	49752	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:13.963922024 CEST	80	49752	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:14.286871910 CEST	49742	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:14.291918039 CEST	80	49742	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:15.021254063 CEST	49746	80	192.168.2.4	156.236.70.154
Oct 13, 2024 20:27:15.026134968 CEST	80	49746	156.236.70.154	192.168.2.4
Oct 13, 2024 20:27:16.111541033 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.111591101 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.111660957 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.111959934 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.111975908 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.825370073 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.825458050 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.826982975 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.826997995 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.827512980 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.834891081 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.879400015 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.949646950 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.949687958 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.949736118 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.949755907 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.949773073 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:16.949819088 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:16.949837923 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.035473108 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.035538912 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.035566092 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.035590887 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.035609007 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.035631895 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.042061090 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.042118073 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.042145014 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.042155981 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.042182922 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.042192936 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.127722979 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.127795935 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.127820969 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.127844095 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.127861977 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.127880096 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.129074097 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.129129887 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.129168034 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.129175901 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.129221916 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.130745888 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.130790949 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.130827904 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.130836010 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.130851030 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.130949974 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.135483980 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.135540962 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.135576010 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.135588884 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.135606050 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.135730982 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.221182108 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.221211910 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.221246004 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.221256971 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.221285105 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.221307039 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.221750021 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.221796036 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.221812963 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.221822023 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.221839905 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.221856117 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.222548962 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.222590923 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.222606897 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.222615004 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.222637892 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.222655058 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.223529100 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.223572016 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.223587036 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.223597050 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.223623037 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.223640919 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.224462986 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.224507093 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.224524021 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.224533081 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.224559069 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.224572897 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.225517988 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.225569963 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.225581884 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.225600958 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.225620985 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.225640059 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.228082895 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.228156090 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.228162050 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.228245974 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.228254080 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.228276968 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.228297949 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.228308916 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.228317976 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.228323936 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.228327990 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.282267094 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.282291889 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.282386065 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.283164024 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.283174992 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.283934116 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.284034014 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.284130096 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.284244061 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.284266949 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.284913063 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.284956932 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.285051107 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.286283016 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.286324978 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.286380053 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.287245035 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.287255049 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.287301064 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.287564039 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.287579060 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.287667036 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.287681103 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.287879944 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.287892103 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.956629992 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.957146883 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.957180977 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.957602978 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.957608938 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.961913109 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.962220907 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.962869883 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.962869883 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.962941885 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.963030100 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.963068008 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.963099957 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.963532925 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.963540077 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.969347000 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.970069885 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.970069885 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.970093012 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.970107079 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.973079920 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.973829985 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.973829985 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:17.973839045 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:17.973856926 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.067414045 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.067475080 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.067581892 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.067610979 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.067629099 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.067658901 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.067838907 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.067838907 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.068072081 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.068084955 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.071204901 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.071253061 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.071398973 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.071456909 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.071464062 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.071861029 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.072016954 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.072243929 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.072244883 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.072518110 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.072530031 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.074476957 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074547052 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.074567080 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.074585915 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.074672937 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074676991 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074707985 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.074827909 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074827909 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074848890 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.074887991 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074911118 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.074925900 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.075002909 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.075027943 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.075254917 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.077050924 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.077145100 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.077316999 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.077316999 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.077399015 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.097079992 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.097140074 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.097284079 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.097317934 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.097317934 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.097337961 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.097352028 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.098284960 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.098335981 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.098438025 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.098448992 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.098476887 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.098573923 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.098573923 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.098763943 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.098778009 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.100119114 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.100207090 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.101831913 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.101869106 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.101876974 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.101943016 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.101943016 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.101984024 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.102138996 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.102180958 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.756866932 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.758095980 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.758095980 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.758189917 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.758208036 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.761502028 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.761785030 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.761845112 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.761879921 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.762264013 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.762279034 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.762303114 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.762331963 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.762772083 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.762778044 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.816647053 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.817327023 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.817389965 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.817877054 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.817892075 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.836078882 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.838294983 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.838361025 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.842591047 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.842606068 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.868252039 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.868299007 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.868483067 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.868614912 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.868643045 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.868659019 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.868666887 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.871474981 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.871594906 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.871634007 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.871706009 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.871793985 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.871855021 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.871901035 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.871948004 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.873979092 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.874013901 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.874103069 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.874229908 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.874229908 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.874248981 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.874259949 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.874905109 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.874918938 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.876554012 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.876652002 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.876755953 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.877285957 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.877322912 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.879184008 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.879204988 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.879580021 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.879823923 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.879847050 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.931581020 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.931646109 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.931756020 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.931958914 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.931978941 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.935540915 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.935570002 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.935782909 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.935933113 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.935945034 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.951210022 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.951371908 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.951436996 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.951528072 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.951528072 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.951574087 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.951586962 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.955398083 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.955435991 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:18.955506086 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.955842972 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:18.955867052 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.553160906 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.556049109 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.594973087 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.595016003 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.595752954 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.595768929 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.596231937 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.596250057 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.596980095 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.596985102 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.605573893 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.606321096 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.606337070 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.607425928 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.607435942 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.628087044 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.628725052 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.628736973 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.629319906 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.629324913 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.644661903 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.645637989 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.645659924 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.647042990 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.647047043 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.723572016 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.723637104 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.723953962 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.727416039 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.727443933 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.731118917 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.731297016 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.731353045 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.736526012 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.736583948 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.736706018 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.737788916 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.737807035 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.742888927 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.742913961 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.745352030 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.745362997 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.745407104 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.745594025 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.745609999 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.751374960 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.751615047 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.751981974 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.752178907 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.752203941 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.752228022 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.752242088 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.756063938 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.756100893 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.756161928 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.758039951 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.758105993 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.758198023 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.758418083 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.758433104 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.758447886 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.758454084 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.758721113 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.758735895 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.763456106 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.763501883 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.763751030 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.763997078 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.764012098 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.769079924 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.769140959 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.769285917 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.769773960 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.769782066 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.769829988 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.769835949 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.774034977 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.774127007 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:19.774203062 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.774569035 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:19.774601936 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.414413929 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.415569067 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.415590048 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.416249037 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.416254997 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.431365013 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.432065964 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.432097912 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.433051109 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.433058023 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.448791027 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.449302912 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.449353933 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.449698925 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.449712038 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.452084064 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.453521013 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.453531027 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.453908920 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.454746962 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.454752922 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.455760002 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.455780983 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.456584930 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.456589937 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.523780107 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.523920059 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.524163961 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.524315119 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.524338961 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.524363995 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.524372101 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.530333996 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.530430079 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.530507088 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.530857086 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.530893087 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.542221069 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.542306900 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.542663097 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.560775995 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.560851097 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.560920000 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.562874079 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.562917948 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.566442966 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.566477060 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.566504955 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.566513062 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.568639994 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.568820000 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.568927050 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.569856882 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.569875956 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.571947098 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.572017908 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.572417974 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.573272943 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.573295116 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.573405981 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.573415041 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.576030970 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.576081991 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.576149940 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.577559948 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.577589035 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.579324961 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.579415083 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.580116987 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.580641031 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.580681086 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.581336021 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.581358910 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.581422091 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.583095074 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.583102942 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.583319902 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.583319902 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.583339930 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:20.583651066 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:20.583662987 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.204924107 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.205605984 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.205668926 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.206285954 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.206300020 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.250611067 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.251596928 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.251646996 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.252667904 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.252676964 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.253413916 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.253969908 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.253978968 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.254889965 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.254894972 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.263380051 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.263614893 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.264076948 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.264138937 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.265109062 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.265122890 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.265671015 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.265683889 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.266273975 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.266278982 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.316143990 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.316226959 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.316358089 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.316581964 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.316603899 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.321842909 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.321892023 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.322415113 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.322782993 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.322798967 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.363240957 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.363442898 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.363585949 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.363698959 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.363698959 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.363718987 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.363729000 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.364820957 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.364888906 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.364950895 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.365324020 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.365345001 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.371045113 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.371103048 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.371160030 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.372634888 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.372662067 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.372754097 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.372903109 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.372936010 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.373405933 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.373431921 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.375106096 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.375185013 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.375238895 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.375581026 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.375581026 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.375587940 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.375596046 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.376862049 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.376933098 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.377010107 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.379050970 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.379090071 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.379291058 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.379291058 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.379314899 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.379336119 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.379363060 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.379874945 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.379897118 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.383049011 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.383142948 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.383301973 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.383476019 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:21.383517981 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:21.999946117 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.035561085 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.035625935 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.036389112 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.036405087 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.042848110 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.047643900 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.052015066 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.052772045 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.052804947 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.059753895 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.087055922 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.087063074 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.098689079 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.098707914 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.099792004 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.099926949 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.100167990 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.100178957 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.104494095 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.104500055 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.105068922 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.105074883 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.105906963 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.105931044 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.107510090 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.107525110 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.141534090 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.141650915 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.142014027 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.153405905 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.153445959 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.153486967 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.153511047 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.157201052 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.157258034 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.157404900 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.157780886 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.157802105 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.192928076 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.192961931 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.193121910 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.193370104 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.193387985 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.198483944 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.198548079 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.198666096 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.199081898 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.199098110 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.207355976 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.207423925 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.207492113 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.207993984 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.208031893 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.208058119 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.208074093 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.209306002 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.209459066 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.209526062 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.209626913 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.209633112 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.209660053 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.209666014 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.211642981 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.211719036 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.211786032 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.212057114 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.212100983 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.212153912 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.212172031 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.218317986 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.218364000 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.218758106 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.219456911 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.219484091 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.221442938 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.221473932 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.221788883 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.224595070 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.224611998 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.224632978 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.224668026 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.228686094 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.228686094 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.228738070 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.827380896 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.828252077 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.828284025 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.829185009 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.829194069 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.885729074 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.886142969 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.886207104 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.886655092 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.886670113 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.894824028 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.895350933 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.895364046 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.895648956 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.896230936 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.896235943 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.896995068 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.897008896 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.898020029 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.898025990 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.911159039 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.911995888 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.912080050 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.916126966 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.916146040 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.944289923 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.944439888 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.944595098 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.952088118 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.952111959 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.952126026 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.952132940 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.955233097 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.955271006 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.956203938 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.956367016 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.956379890 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.996121883 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.996265888 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.996331930 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.996367931 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.996368885 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.996387005 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.996407032 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.998800039 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.998820066 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:22.998883963 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.999037981 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:22.999048948 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.003953934 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.004024982 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.004076004 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.004151106 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.004160881 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.004169941 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.004173040 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.005897999 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.006078005 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.006119967 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.006356001 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.006364107 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.006383896 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.006387949 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.006532907 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.006580114 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.006778002 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.006778002 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.006855011 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.008749008 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.008816957 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.008888006 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.009021044 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.009053946 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.025341034 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.025408030 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.025460005 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.025604963 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.025604963 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.025638103 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.025661945 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.027719021 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.027729988 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.027791977 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.027901888 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.027915001 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.625592947 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.626164913 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.626182079 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.626771927 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.626777887 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.667814970 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.668308020 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.668328047 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.668792009 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.668797016 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.681684017 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.682177067 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.682225943 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.682765961 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.682781935 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.700831890 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.701276064 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.701308966 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.701843023 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.701853991 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.721340895 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.721844912 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.721892118 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.722362995 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.722373009 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.740137100 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.740308046 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.740425110 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.740613937 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.740636110 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.740669012 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.740678072 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.743719101 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.743788958 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.743885994 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.744029045 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.744049072 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.778446913 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.778510094 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.778701067 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.778729916 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.778745890 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.778754950 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.778759956 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.781896114 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.781932116 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.782156944 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.782320976 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.782332897 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.792596102 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.792740107 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.792913914 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.792913914 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.792913914 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.795727015 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.795828104 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.795906067 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.796082020 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.796109915 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.821316004 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.821403027 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.821554899 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.821696043 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.821723938 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.821741104 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.821753979 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.824958086 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.824997902 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.825139999 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.825318098 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.825329065 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.835845947 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.835930109 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.836046934 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.836071968 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.836085081 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.836103916 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.836111069 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.838639975 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.838680029 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:23.838737965 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.838931084 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:23.838943005 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.099889994 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.099956036 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.427856922 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.428952932 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.429033995 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.429358959 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.429373980 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.451699972 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.452282906 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.452305079 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.453109026 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.453114986 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.538050890 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.538575888 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.538609028 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.539061069 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.539066076 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.543752909 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.544169903 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.544255972 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.544676065 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.544691086 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.546863079 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.547193050 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.547208071 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.547713041 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.547724009 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.557589054 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.557799101 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.557955980 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.557956934 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.557956934 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.560786963 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.560827017 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.560976028 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.561136007 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.561151028 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.649383068 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.650271893 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.650325060 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.650352001 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.650372028 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.650382996 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.650388002 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.653017998 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.653058052 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.653148890 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.653285980 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.653296947 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.659296036 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.659375906 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.659488916 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.659573078 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.659573078 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.659617901 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.659631014 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.662811041 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.662841082 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.663227081 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.663256884 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.663461924 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.663521051 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.663749933 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.663762093 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.663858891 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.663877010 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.663899899 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.663914919 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.666520119 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.666558027 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.666796923 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.666796923 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.666826963 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.681197882 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.681277990 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.681335926 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.685312986 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.685329914 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.688016891 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.688060045 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.688163996 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.688291073 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.688303947 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:24.865422010 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:24.865443945 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.241455078 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.241898060 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.241909027 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.242305040 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.242310047 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.326127052 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.326577902 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.326597929 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.326986074 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.326991081 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.336886883 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.337394953 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.337404966 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.338042021 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.338047028 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.342222929 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.342724085 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.342734098 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.343451023 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.343456984 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.353039980 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.353174925 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.353245974 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.356858015 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.356875896 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.356889009 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.356901884 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.359376907 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.359447002 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.359513044 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.359642982 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.359663963 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.365650892 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.365983963 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.365993977 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.366396904 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.366401911 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.434926987 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.435056925 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.435185909 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.435214996 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.435230017 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.435240030 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.435245991 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.437563896 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.437613964 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.437680960 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.437808037 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.437827110 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.445669889 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.445817947 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.445892096 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.445921898 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.445921898 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.445945978 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.445959091 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.447802067 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.447870016 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.447932959 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.448050976 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.448077917 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.456114054 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.456171036 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.456249952 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.456320047 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.456320047 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.456331968 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.456366062 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.457961082 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.457971096 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.458174944 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.458292961 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.458302021 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.480463982 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.480546951 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.480609894 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.480657101 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.480663061 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.480671883 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.480675936 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.482439995 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.482490063 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.482549906 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.482650042 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:25.482673883 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:25.648358107 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:25.648390055 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:25.648452997 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:25.648714066 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:25.648729086 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:26.071186066 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.071695089 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.071753025 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.072180986 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.072194099 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.119956970 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.120388985 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.120407104 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.120800972 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.120806932 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.122591972 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.123128891 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.123128891 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.123142004 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.123153925 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.131160021 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.131798983 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.131798983 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.131851912 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.131880045 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.161395073 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.161709070 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.161742926 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.162075043 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.162081957 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.209795952 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.209876060 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.209945917 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.210189104 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.210216045 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.210246086 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.210254908 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.212793112 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.212856054 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.213057041 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.213119030 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.213136911 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.231209040 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.231266975 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.231364965 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.231496096 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.231496096 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.231518984 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.231539965 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.233134985 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.233194113 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.233464956 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.233985901 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.233998060 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.234029055 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.234040976 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.234097958 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.234126091 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.234724998 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.235297918 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.235308886 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.238951921 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.238992929 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.243014097 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.243014097 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.243048906 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.246815920 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.246877909 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.246951103 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.247030973 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.247031927 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.247051954 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.247066021 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.248853922 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.248862028 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.249057055 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.249080896 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.249083996 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.273895025 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.273968935 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.274094105 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.274094105 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.274262905 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.274281979 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.275769949 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.275788069 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.275966883 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.275966883 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.275994062 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.311431885 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:26.311718941 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:26.311733007 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:26.312907934 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:26.313292027 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:26.313460112 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:26.365458012 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:26.925610065 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.926265955 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.926327944 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.927083969 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.927099943 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.954837084 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.955785990 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.955799103 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.956644058 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.956648111 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.962022066 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.962466002 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.962486029 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.963254929 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.963262081 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.968758106 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.969149113 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.969158888 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.969515085 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.969521046 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.979619026 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.980051041 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.980057955 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:26.980555058 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:26.980557919 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.036468983 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.036550045 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.036670923 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.036926985 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.036943913 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.036955118 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.036961079 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.044625044 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.044673920 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.044811964 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.045069933 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.045088053 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.074937105 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.075031996 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.075515985 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.076908112 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.076939106 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.080897093 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.080959082 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.083616018 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.083869934 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.083903074 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.091821909 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.091830015 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.091897964 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.091911077 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.091957092 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.091998100 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.092230082 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.092248917 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.092259884 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.092267036 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.092338085 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.092341900 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.098145008 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.098202944 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.098251104 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.098567963 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.098647118 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.098714113 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.099101067 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.099116087 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.099128962 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.099136114 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.100833893 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.100883961 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.102188110 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.102220058 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.102297068 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.102499962 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.102510929 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.103492975 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.103539944 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.103634119 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.103933096 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.103954077 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.615647078 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 13, 2024 20:27:27.621176958 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 13, 2024 20:27:27.621257067 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 13, 2024 20:27:27.739056110 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.739526033 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.739543915 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.739953995 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.739963055 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.756272078 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.756828070 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.756869078 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.757283926 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.757292986 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.768712044 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.769140959 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.769159079 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.769584894 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.769596100 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.785218000 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.785871029 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.785911083 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:27.786170006 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:27.786183119 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.022711039 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.022823095 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.022883892 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.022950888 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.022977114 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.022984028 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.023034096 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.023072004 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.023148060 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.023350000 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.023986101 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.024144888 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.024230003 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.031976938 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.031994104 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.038552046 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.038573027 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.048197985 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.048228979 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.048249006 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.048257113 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.048300982 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.048320055 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.048338890 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.048346043 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.063653946 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.063704014 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.064223051 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.064235926 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.064271927 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.064286947 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.073810101 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.073880911 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.073967934 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.078175068 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.078196049 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.078289032 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.079000950 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.079036951 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.079092026 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.080158949 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.080190897 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.080327988 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.080512047 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.080526114 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.080852032 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.080885887 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.081154108 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.081177950 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.081263065 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.081279993 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.148581028 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.148673058 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.148977041 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.149274111 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.149307966 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.149327993 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.149336100 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.153084993 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.153124094 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.153403044 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.153633118 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.153646946 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.747369051 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.748301029 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.748347044 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.749301910 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.749310970 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.758775949 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.759826899 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.759854078 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.760643959 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.760840893 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.760854006 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.761389971 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.761411905 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.762705088 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.762710094 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.776478052 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.776845932 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.776885986 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.777306080 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.777314901 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.846453905 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.846930027 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.846951962 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.847672939 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.847685099 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.857120991 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.857207060 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.857342958 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.857471943 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.857498884 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.857515097 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.857522011 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.862198114 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.862247944 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.862327099 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.862493038 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.862509966 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.869981050 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.870044947 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.870089054 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.870225906 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.870249033 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.870264053 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.870270967 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.872683048 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.872720957 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.872806072 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.873003006 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.873017073 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.875049114 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.875127077 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.875255108 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.875255108 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.875276089 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.875283957 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.877211094 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.877255917 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.877363920 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.877495050 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.877506018 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.892668009 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.892738104 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.892788887 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.892905951 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.892930984 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.892946959 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.892955065 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.895037889 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.895139933 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:28.895235062 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.895337105 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:28.895358086 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.009988070 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.010059118 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.010279894 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.010510921 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.010545015 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.010560989 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.010569096 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.013258934 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.013322115 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.013432980 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.013825893 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.013844967 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.569185019 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.569801092 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.569827080 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.570473909 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.570481062 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.598839045 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.599632025 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.599649906 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.600254059 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.600402117 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.600408077 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.601102114 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.601104021 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.601136923 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.602252007 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.602266073 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.602794886 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.602826118 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.603598118 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.603602886 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.679842949 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.679936886 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.680047035 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.680279016 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.680301905 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.680318117 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.680325031 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.685863972 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.685899973 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.685973883 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.686480045 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.686501026 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.713177919 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.713326931 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.713404894 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.713447094 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.713470936 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.713485956 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.713494062 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.717207909 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.717291117 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.717484951 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.717824936 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.717865944 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.717895031 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.718347073 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.718362093 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.719032049 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.719101906 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.719162941 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.719302893 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.719310999 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.719814062 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.719827890 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.719847918 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.719852924 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.722812891 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.722884893 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.722975969 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.723161936 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.723177910 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.726804972 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.726876974 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.726958990 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.727734089 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.727770090 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.731492043 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.731512070 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.731645107 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.732160091 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.732186079 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.838340998 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.838423014 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.838835001 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.863014936 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.863058090 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.875627041 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.875724077 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:29.875859022 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.883963108 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:29.884027004 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.373120070 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.373789072 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.373819113 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.374543905 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.374551058 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.385185003 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.386024952 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.386071920 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.387108088 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.387121916 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.393343925 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.393893957 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.393929005 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.394577980 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.394593954 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.423214912 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.423785925 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.423835039 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.424765110 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.424782038 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.495507002 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.495788097 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.495873928 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.496768951 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.496819973 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.496910095 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.496932030 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.496949911 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.497000933 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.504203081 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.504268885 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.504791021 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.518282890 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.518327951 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.518387079 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.518404961 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.520730972 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.520761013 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.520776033 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.520782948 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.523250103 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.523288012 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.529184103 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.529252052 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.529381037 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.530072927 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.530112028 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.530235052 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.530828953 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.530839920 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.530901909 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.531321049 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.531362057 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.531577110 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.531596899 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.531858921 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.531873941 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.536690950 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.536714077 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.536771059 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.536780119 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.536822081 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.537580013 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.537580013 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.537601948 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.537625074 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.541682005 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.541714907 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.541876078 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.542068005 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.542093039 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.570770025 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.571538925 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.571566105 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.574925900 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.574930906 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.680979967 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.681010008 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.681067944 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.681073904 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.681117058 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.681442022 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.681468964 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.681483984 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.681492090 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.683948040 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.683978081 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:30.684118986 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.684252977 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:30.684268951 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.220066071 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.220357895 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.220526934 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.220634937 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.220665932 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.220851898 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.220870018 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.221376896 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.221383095 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.221507072 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.221513033 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.221667051 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.221682072 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.222145081 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.222151041 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.305087090 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.305680037 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.305715084 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.306082010 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.306097984 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330029964 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330272913 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330398083 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.330424070 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.330446005 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330459118 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.330470085 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330867052 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330900908 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.330960035 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.331007004 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.331082106 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.331087112 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.331099033 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.331104040 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.331825972 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.332184076 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.332247019 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.332335949 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.332335949 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.332382917 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.332412004 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.334815979 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.334907055 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.334995031 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335160017 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335194111 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.335381985 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335403919 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.335649967 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335669041 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335711956 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.335781097 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335794926 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335802078 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.335959911 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.335973978 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.415599108 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.416209936 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.416239023 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.416635990 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.416642904 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.423429966 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.423496008 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.423574924 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.423728943 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.423753977 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.423769951 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.423777103 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.426835060 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.426862001 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.426949978 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.427196026 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.427228928 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.530081034 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.530236006 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.530416965 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.530575037 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.530607939 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.530616999 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.530623913 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.533543110 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.533585072 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:31.533926010 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.534136057 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:31.534153938 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.000595093 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.001224995 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.001245975 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.001717091 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.001724005 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.011007071 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.011769056 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.011816025 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.012094975 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.012113094 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.012121916 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.012510061 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.012542009 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.013107061 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.013119936 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.100550890 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.101125956 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.101192951 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.101573944 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.101588964 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.109980106 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.110210896 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.110301971 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.110384941 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.110400915 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.113491058 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.113533020 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.113605976 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.113781929 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.113801003 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.122181892 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.122349024 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.122435093 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.122504950 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.122529984 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.122544050 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.122551918 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.124627113 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.124721050 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.124809980 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.124974012 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.124974012 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.124984026 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.124994040 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.125627041 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.125710964 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.125785112 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.125917912 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.125940084 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.127161980 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.127197027 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.127269030 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.127429008 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.127441883 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.213790894 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.213860989 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.214152098 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.214354038 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.214370012 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.214385033 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.214392900 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.219517946 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.219564915 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.219737053 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.220129967 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.220151901 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.275835037 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.276467085 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.276484966 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.276909113 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.276915073 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.392853975 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.392916918 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.392990112 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.393249989 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.393273115 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.393287897 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.393295050 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.396745920 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.396786928 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.397015095 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.397193909 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.397217989 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.809567928 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.810281992 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.810348034 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.810638905 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.810656071 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.811160088 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.811590910 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.811619043 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.811969042 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.811975956 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.825495958 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.825936079 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.825959921 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.826430082 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.826436043 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.918401957 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.918471098 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.918549061 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.918567896 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.918591022 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.918646097 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.918787003 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.918806076 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.918818951 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.918826103 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.922861099 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.922895908 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.923095942 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.923228979 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.923525095 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.923535109 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.924305916 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.924384117 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.924500942 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.924524069 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.924536943 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.924545050 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.927314043 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.927418947 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.927653074 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.927859068 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.927881956 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.928251028 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.928678036 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.928702116 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.929259062 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.929265022 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.940133095 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.940942049 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.941000938 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.941036940 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.941047907 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.941057920 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.941062927 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.943996906 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.944101095 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:32.944235086 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.944423914 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:32.944459915 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.045959949 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.046067953 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.046112061 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.046180964 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.046405077 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.046428919 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.046442986 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.046451092 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.049916029 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.049957991 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.050043106 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.050199032 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.050210953 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.099891901 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.100383997 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.100397110 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.100980997 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.100986958 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.328397036 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.328629017 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.328699112 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.328771114 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.328795910 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.328810930 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.328819036 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.332171917 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.332215071 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.332293034 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.332442045 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.332456112 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.591780901 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.592317104 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.592915058 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.592941999 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.593461990 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.593466997 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.593712091 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.593736887 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.594126940 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.594136000 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.651707888 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.652224064 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.652255058 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.652725935 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.652733088 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.702928066 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.702996016 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.703267097 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.703337908 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.703455925 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.703455925 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.703478098 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.703488111 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.704237938 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.704301119 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.704340935 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.704361916 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.704375029 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.704381943 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.706463099 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.706482887 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.706517935 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.706537008 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.706629992 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.706655025 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.706724882 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.706739902 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.706819057 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.706846952 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.719309092 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.719959021 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.719981909 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.720372915 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.720377922 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.767771959 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.767848969 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.767903090 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.767931938 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.767963886 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.768124104 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.768147945 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.768161058 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.768167973 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.775044918 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.775089979 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.775258064 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.775362968 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.775372028 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.830899954 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.830982924 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.831053019 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.831195116 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.831195116 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.831218004 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.831243992 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.833631039 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.833672047 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:33.833930016 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.834047079 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:33.834064007 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.028656960 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.029186010 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.029268026 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.029623985 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.029638052 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.144906998 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.145040989 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.145524025 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.145716906 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.145745993 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.145761967 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.145771027 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.149133921 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.149178982 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.149315119 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.149658918 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.149673939 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.390163898 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.390918016 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.390959978 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.391433954 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.391443014 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.391673088 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.392373085 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.392405033 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.393258095 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.393265009 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.446369886 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.447704077 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.447724104 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.448457956 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.448463917 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.501605034 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.501774073 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.501823902 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.501852036 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.501898050 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.501980066 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.502389908 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.502389908 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.502409935 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.502427101 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.507678986 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.507736921 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.507821083 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.507982016 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.508009911 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.509259939 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.509357929 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.509541035 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.509933949 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.509973049 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.510004044 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.510019064 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.515825987 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.516323090 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.516349077 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.516527891 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.517338037 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.517359018 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.517843962 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.517858982 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.517887115 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.517896891 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.556032896 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.556274891 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.556338072 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.556600094 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.556615114 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.556631088 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.556638002 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.559958935 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.560004950 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.560090065 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.560265064 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.560276031 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.628365993 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.628595114 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.628642082 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.628680944 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.628680944 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.632714033 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.632714033 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.632730007 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.632734060 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.652967930 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.653021097 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.653418064 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.653801918 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.653815031 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.815609932 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.816042900 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.816073895 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.816889048 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.816895008 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.925951004 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.926080942 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.926152945 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.926453114 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.926501989 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.926533937 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.926551104 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.933182955 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.933283091 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:34.933370113 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.933614969 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:34.933646917 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.185215950 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.185724974 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.185751915 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.186177015 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.186182976 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.211056948 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.211770058 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.211788893 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.212250948 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.212255001 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.242196083 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.242629051 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.242656946 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.243038893 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.243043900 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.294764042 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.294852018 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.294986010 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.295164108 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.295178890 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.295242071 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.295247078 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.299211025 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.299267054 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.299361944 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.299577951 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.299597979 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.328166962 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.328479052 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.328566074 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.328599930 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.328608990 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.328620911 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.328624964 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.331084967 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.331124067 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.331270933 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.331429005 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.331439972 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.354820967 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.354907990 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.354976892 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.355005980 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.355026007 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.355081081 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.358995914 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.358995914 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.359035015 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.359059095 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.361850023 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.361887932 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.362090111 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.362224102 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.362232924 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.366473913 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.366950035 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.366988897 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.367294073 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.367300987 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.484518051 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.484580040 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.484628916 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.484834909 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.484849930 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.484865904 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.484872103 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.487904072 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.487942934 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.488065004 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.488219976 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.488234043 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.646075010 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.650510073 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.650541067 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.651475906 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.651489973 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.763542891 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.763694048 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.763756990 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.764067888 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.764095068 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.764108896 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.764116049 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.768424988 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.768465042 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.768572092 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.768940926 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.768960953 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.963867903 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.964886904 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.964919090 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.966175079 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.966181993 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.997627020 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.998353958 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.998378992 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:35.999125004 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:35.999130964 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.061137915 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.062009096 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.062022924 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.062769890 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.062786102 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.074074984 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.074191093 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.074317932 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.074682951 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.074707985 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.074738979 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.074745893 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.079830885 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.079863071 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.079952002 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.080177069 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.080188990 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.106853008 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.106925011 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.107027054 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.107024908 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.107099056 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.107217073 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.107217073 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.107254982 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.107283115 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.110455036 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.110488892 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.110738039 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.110985041 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.110999107 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.161458015 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.162343025 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.162369013 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.163079023 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.163084984 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.173001051 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.173094034 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.173152924 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.173455954 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.173472881 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.178463936 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.178497076 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.178570986 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.179115057 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.179126024 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.206517935 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:36.206667900 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:36.206773043 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:36.273591042 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.273756027 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.274194002 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.274286032 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.274286032 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.274303913 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.274312973 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.278994083 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.279026985 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.279108047 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.279620886 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.279639959 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.443133116 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.443933010 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.443965912 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.444907904 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.444912910 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.501099110 CEST	49826	443	192.168.2.4	142.250.186.100
Oct 13, 2024 20:27:36.501123905 CEST	443	49826	142.250.186.100	192.168.2.4
Oct 13, 2024 20:27:36.553894043 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.553997040 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.554058075 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.554460049 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.554476023 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.554701090 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.554706097 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.559928894 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.559966087 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.560065031 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.560190916 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.560201883 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.757148981 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.757688046 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.757702112 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.758131027 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.758135080 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.782042980 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.782499075 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.782516956 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.782923937 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.782927990 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.867671967 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.868032932 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.868088961 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.868100882 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.868114948 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.868160963 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.868217945 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.868232965 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.868242025 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.868259907 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.871093988 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.871134996 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.871196032 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.871397018 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.871406078 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.878324986 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.878731966 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.878768921 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.879215956 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.879220963 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.895410061 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.895592928 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.895647049 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.895705938 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.895716906 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.895726919 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.895730972 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.898179054 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.898228884 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.898277998 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.898392916 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.898411989 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.973009109 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.973368883 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.973382950 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.973820925 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.973824978 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.995750904 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.995969057 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.996143103 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.996990919 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.996990919 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:36.997003078 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:36.997010946 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.005503893 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.005547047 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.005645990 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.006068945 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.006086111 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.096383095 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.096451044 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.096687078 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.098076105 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.098084927 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.098263025 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.098268986 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.137353897 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.137397051 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.137459993 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.147816896 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.147836924 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.270620108 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.271648884 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.271661043 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.272986889 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.272991896 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.390497923 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.391235113 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.391300917 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.391303062 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.391350031 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.391915083 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.391927958 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.391933918 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.391938925 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.396276951 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.396373987 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.396492958 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.397227049 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.397265911 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.545592070 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.546339989 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.546365976 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.547380924 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.547395945 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.588339090 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.588841915 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.588881969 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.589586020 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.589592934 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.657893896 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.658262968 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.658338070 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.658684969 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.658703089 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.658714056 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.658720016 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.663455963 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.663496971 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.663592100 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.663886070 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.663897991 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.696134090 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.696656942 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.696690083 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.697179079 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.697185993 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.701668978 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.701823950 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.701891899 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.701911926 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.701961994 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.702003002 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.702025890 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.702039003 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.702039003 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.702039003 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.702047110 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.702054024 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.702054977 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.706886053 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.706981897 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.707067013 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.707443953 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.707478046 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.776498079 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.777266026 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.777296066 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.778235912 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.778242111 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.805633068 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.806067944 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.806154966 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.806287050 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.806312084 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.806318998 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.806324959 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.810616970 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.810714006 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:37.810863018 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.811022043 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:37.811054945 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.093506098 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.093543053 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.093595028 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.093602896 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.093656063 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.093940020 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.093960047 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.093971014 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.093976974 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.096883059 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.096919060 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.096978903 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.097109079 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.097121954 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.298479080 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.299144030 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.299190044 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.299477100 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.299484968 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.377444029 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.378001928 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.378068924 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.378434896 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.378448963 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.407840014 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.408369064 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.408385992 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.408829927 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.408840895 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.413999081 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.414150000 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.414207935 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.414577007 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.414594889 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.420003891 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.420047045 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.420114994 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.420864105 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.420881987 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.489835978 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.490700006 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.490712881 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.491482973 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.491487026 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.493369102 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.493448019 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.493499041 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.493529081 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.493555069 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.493597984 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.493958950 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.493974924 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.493985891 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.493990898 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.500554085 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.500591993 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.500652075 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.501055002 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.501070976 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.522854090 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.523015976 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.523066044 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.523294926 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.523309946 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.528197050 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.528228998 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.528302908 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.528712034 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.528728008 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.608285904 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.608347893 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.608448982 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.608529091 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.608530045 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.608634949 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.608634949 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.608681917 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.608716011 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.611217976 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.611260891 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.611325026 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.611452103 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.611464024 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.783303022 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.783806086 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.783823013 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.784257889 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.784265041 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.896825075 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.896965027 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.897027016 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.897181988 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.897201061 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.897212029 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.897217989 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.900057077 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.900110006 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:38.900166988 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.900343895 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:38.900358915 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.095725060 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.096245050 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.096267939 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.096684933 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.096694946 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.099900961 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.100223064 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.100250006 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.100544930 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.100553036 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.201373100 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.201885939 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.201904058 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.202344894 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.202349901 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.207920074 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.209295034 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.209378958 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.209451914 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.209588051 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.209588051 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.209606886 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.209618092 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.210382938 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.210490942 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.210519075 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.210525990 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.210540056 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.210546017 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.212568045 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.212619066 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.212655067 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.212681055 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.212693930 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.212733030 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.212855101 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.212872028 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.212939978 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.212955952 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.292685032 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.293211937 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.293276072 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.293663979 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.293678045 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.312908888 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.312989950 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.313045979 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.313056946 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.313102007 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.313149929 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.313239098 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.313252926 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.313262939 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.313280106 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.316083908 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.316117048 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.316248894 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.316339970 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.316346884 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.404495001 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.404839993 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.404954910 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.405008078 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.405008078 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.405042887 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.405066013 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.407336950 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.407371044 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.407460928 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.407573938 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.407588959 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.570075035 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.570509911 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.570534945 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.570955992 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.570961952 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.687047958 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.687124968 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.687166929 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.687196970 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.687217951 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.687259912 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.687433004 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.687447071 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.687462091 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.687469006 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.690525055 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.690557957 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.690787077 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.691051960 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.691065073 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.921251059 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.921760082 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.921840906 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.922225952 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.922245026 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.933648109 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.934082031 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.934159994 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:39.934469938 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:39.934485912 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.035567045 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.036102057 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.036125898 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.036627054 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.036633968 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.038608074 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.038903952 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.038973093 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.039026976 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.039026976 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.039048910 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.039062023 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.041889906 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.041923046 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.041999102 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.042140961 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.042152882 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.048080921 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.048686981 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.048753977 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.048826933 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.048826933 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.048855066 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.048877001 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.051048040 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.051095009 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.051242113 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.051407099 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.051422119 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.078784943 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.079149008 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.079164028 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.079559088 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.079566002 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.145191908 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.145265102 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.145333052 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.145486116 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.145499945 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.145509005 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.145514011 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.148586035 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.148612022 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.148729086 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.148853064 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.148868084 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.192461967 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.192537069 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.192625999 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.192646980 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.192666054 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.192766905 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.192851067 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.192871094 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.192879915 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.192886114 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.195672035 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.195692062 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.195949078 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.196109056 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.196121931 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.395168066 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.395612955 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.395629883 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.396054029 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.396059036 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.511912107 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.512082100 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.512147903 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.512238979 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.512254953 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.512264967 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.512269974 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.515206099 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.515256882 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.515324116 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.515530109 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.515546083 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.712682962 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.713267088 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.713280916 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.713810921 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.713815928 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.727763891 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.728220940 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.728250980 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.728821993 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.728827953 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.819376945 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.819909096 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.819920063 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.820358038 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.820364952 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.822637081 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.822947979 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.823025942 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.823051929 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.823075056 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.823126078 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.823189974 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.823201895 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.823221922 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.823227882 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.825963974 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.826033115 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.826141119 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.826304913 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.826335907 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.837893009 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.838205099 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.838344097 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.838395119 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.838396072 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.838422060 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.838433981 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.841469049 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.841562033 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.841651917 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.841793060 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.841825008 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.900048971 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.900859118 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.900870085 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.901221037 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.901225090 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.929403067 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.929955006 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.930044889 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.930073977 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.930073977 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.930093050 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.930102110 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.932955027 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.933012962 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:40.933191061 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.933314085 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:40.933339119 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.015991926 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.018486023 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.018619061 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.018619061 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.018647909 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.018668890 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.021836042 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.021908045 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.022134066 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.022217989 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.022233009 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.200597048 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.201210022 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.201241016 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.201868057 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.201874018 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.313767910 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.314281940 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.314403057 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.314403057 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.314651012 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.314671040 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.317333937 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.317358017 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.317538023 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.317563057 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.317567110 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.518035889 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.518549919 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.518567085 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.519032001 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.519037008 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.535218000 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.535628080 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.535670996 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.535912991 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.535919905 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.602185965 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.602955103 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.602967978 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.603158951 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.603163958 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.857665062 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.857758045 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.857999086 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.857999086 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858005047 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858031034 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858042955 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858078003 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858158112 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858342886 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858342886 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858355999 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858364105 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858444929 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858510971 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.858833075 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858833075 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858846903 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.858850956 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.860685110 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.861865044 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.861911058 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.861968994 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862040997 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862051010 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.862184048 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862190962 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862214088 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.862617016 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862621069 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.862660885 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862689018 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.862790108 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862828970 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862840891 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.862946033 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862958908 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.862972021 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.862983942 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.971185923 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.971224070 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.971286058 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.971309900 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.971343994 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.971617937 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.971630096 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.971652985 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.971657991 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.974725962 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.974770069 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:41.974833012 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.975047112 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:41.975056887 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.061073065 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.061628103 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.061642885 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.062448025 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.062452078 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.177272081 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.177807093 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.177862883 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.177938938 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.177959919 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.177973032 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.177985907 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.180865049 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.180898905 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.180968046 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.181150913 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.181159973 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.546678066 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.547147036 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.547172070 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.547616005 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.547622919 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.555080891 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.555558920 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.555603981 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.556066036 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.556076050 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.568123102 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.568766117 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.568793058 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.569204092 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.569210052 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.653960943 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.654485941 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.654516935 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.654923916 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.654928923 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.658763885 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.659001112 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.659060001 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.659106016 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.659128904 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.659141064 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.659147024 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.661437035 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.661484957 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.661570072 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.661674023 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.661679983 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.668729067 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.668761969 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.668826103 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.668843985 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.668876886 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.668984890 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.669008017 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.669022083 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.669028997 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.671132088 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.671166897 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.671276093 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.671417952 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.671431065 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.686163902 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.686914921 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.686981916 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.687041044 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.687052965 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.687068939 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.687074900 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.689686060 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.689733982 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.689799070 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.689903975 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.689910889 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.787210941 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.787251949 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.787307978 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.787321091 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.787533998 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.788373947 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.788373947 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.788397074 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.788408995 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.798479080 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.798521996 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.798587084 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.798759937 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.798775911 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.868685961 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.869151115 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.869179010 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.869791985 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.869796038 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.978029966 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.978885889 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.978924990 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.979033947 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.979033947 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.979141951 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.979177952 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.981434107 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.981487036 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:42.981848001 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.982642889 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:42.982661009 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.361592054 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.362026930 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.362215042 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.362278938 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.362483978 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.362509966 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.362632990 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.362648010 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.362950087 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.362956047 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.370454073 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.371097088 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.371098042 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.371143103 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.371167898 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.471065044 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.471308947 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.471609116 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.471610069 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.471610069 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.472150087 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.472285986 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.472659111 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.472717047 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.472717047 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.472734928 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.472745895 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.474745989 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.474781990 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.474809885 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.474834919 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.474935055 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.474965096 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.475064039 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.475081921 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.475136042 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.475148916 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.485395908 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.485418081 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.485455036 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.485486984 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.485558987 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.485666037 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.485666990 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.485716105 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.485745907 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.487725973 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.487782955 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.487957954 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.487958908 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.487992048 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.515681028 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.516721964 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.516721964 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.516760111 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.516777039 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.631108999 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.631161928 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.631314993 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.631330013 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.631439924 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.631439924 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.631519079 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.631539106 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.634208918 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.634254932 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.634494066 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.634494066 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.634532928 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.659184933 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.660026073 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.660026073 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.660079002 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.660118103 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.693433046 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.693511009 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.769983053 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.770176888 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.770235062 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.770409107 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.770410061 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.770410061 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.773825884 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.773863077 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:43.774039030 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.774123907 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:43.774136066 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.068341970 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.068384886 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.155432940 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.155900002 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.155945063 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.156451941 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.156459093 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.161889076 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.162467003 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.162482023 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.162623882 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.162626982 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.207218885 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.208053112 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.208077908 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.208404064 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.208411932 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.264969110 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.265125036 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.265232086 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.265322924 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.265322924 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.265374899 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.265403986 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.268114090 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.268208981 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.268279076 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.268409967 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.268456936 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.274902105 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.274939060 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.274991989 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.275010109 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.275053978 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.275264978 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.275264978 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.275281906 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.275290966 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.277787924 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.277893066 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.277971029 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.278192043 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.278228998 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.306742907 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.307171106 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.307199001 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.307578087 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.307585001 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.322551966 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.322633982 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.322684050 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.322840929 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.322859049 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.322873116 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.322880030 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.325687885 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.325774908 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.325858116 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.325968027 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.325999022 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.426292896 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.426376104 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.426584959 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.426584959 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.426623106 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.426640987 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.430315018 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.430413961 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.430489063 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.430627108 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.430655956 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.454550982 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.455018997 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.455034018 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.455360889 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.455364943 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.567075968 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.567279100 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.567326069 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.567359924 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.567370892 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.567514896 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.567514896 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.567536116 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.567545891 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.570763111 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.570802927 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 13, 2024 20:27:44.570897102 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.571055889 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 13, 2024 20:27:44.571065903 CEST	443	49940	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 20:26:21.913996935 CEST	53	53240	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:22.001790047 CEST	53	60490	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:23.078116894 CEST	53	64824	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:23.478684902 CEST	52566	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:23.478895903 CEST	62610	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:23.938668966 CEST	53	52566	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:24.079703093 CEST	53	62610	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:25.065906048 CEST	53	60281	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:25.584043980 CEST	61731	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:25.584280968 CEST	63995	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:25.590886116 CEST	53	61731	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:25.591406107 CEST	53	63995	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:25.828397036 CEST	52698	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:25.828614950 CEST	59696	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:26.389128923 CEST	53	52698	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:26.949856043 CEST	52493	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:26.950037003 CEST	49868	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:26.957089901 CEST	53	52493	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:26.958148956 CEST	53	49868	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:27.225554943 CEST	53	51448	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:27.546777010 CEST	49894	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:27.547060013 CEST	60741	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:27.553637028 CEST	53	49894	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:27.557785034 CEST	53	60741	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:27.705739021 CEST	61516	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:27.705908060 CEST	56631	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:27.713597059 CEST	53	56631	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:27.714871883 CEST	53	61516	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:27.832600117 CEST	53	59696	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:28.233603001 CEST	50724	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:28.233803034 CEST	55871	53	192.168.2.4	1.1.1.1
Oct 13, 2024 20:26:28.240597010 CEST	53	50724	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:28.240612030 CEST	53	55871	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:39.219018936 CEST	138	138	192.168.2.4	192.168.2.255
Oct 13, 2024 20:26:40.091734886 CEST	53	57640	1.1.1.1	192.168.2.4
Oct 13, 2024 20:26:58.978591919 CEST	53	58936	1.1.1.1	192.168.2.4
Oct 13, 2024 20:27:21.368536949 CEST	53	60848	1.1.1.1	192.168.2.4
Oct 13, 2024 20:27:22.030210972 CEST	53	60671	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 13, 2024 20:26:24.079786062 CEST	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Oct 13, 2024 20:26:27.832684040 CEST	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 20:26:23.478684902 CEST	192.168.2.4	1.1.1.1	0x92aa	Standard query (0)	telegiraum.club	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:23.478895903 CEST	192.168.2.4	1.1.1.1	0xdd18	Standard query (0)	telegiraum.club	65	IN (0x0001)	false
Oct 13, 2024 20:26:25.584043980 CEST	192.168.2.4	1.1.1.1	0x4095	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:25.584280968 CEST	192.168.2.4	1.1.1.1	0x5b40	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 20:26:25.828397036 CEST	192.168.2.4	1.1.1.1	0x15cf	Standard query (0)	telegiraum.club	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:25.828614950 CEST	192.168.2.4	1.1.1.1	0x9443	Standard query (0)	telegiraum.club	65	IN (0x0001)	false
Oct 13, 2024 20:26:26.949856043 CEST	192.168.2.4	1.1.1.1	0xf67	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:26.950037003 CEST	192.168.2.4	1.1.1.1	0xa108	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 13, 2024 20:26:27.546777010 CEST	192.168.2.4	1.1.1.1	0x7572	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:27.547060013 CEST	192.168.2.4	1.1.1.1	0x1368	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Oct 13, 2024 20:26:27.705739021 CEST	192.168.2.4	1.1.1.1	0x8a61	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:27.705908060 CEST	192.168.2.4	1.1.1.1	0xd3eb	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 13, 2024 20:26:28.233603001 CEST	192.168.2.4	1.1.1.1	0x7b0c	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:28.233803034 CEST	192.168.2.4	1.1.1.1	0x27bb	Standard query (0)	ipinfo.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 20:26:23.938668966 CEST	1.1.1.1	192.168.2.4	0x92aa	No error (0)	telegiraum.club		156.236.70.154	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:25.590886116 CEST	1.1.1.1	192.168.2.4	0x4095	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:25.591406107 CEST	1.1.1.1	192.168.2.4	0x5b40	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 20:26:26.389128923 CEST	1.1.1.1	192.168.2.4	0x15cf	No error (0)	telegiraum.club		156.236.70.154	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:26.957089901 CEST	1.1.1.1	192.168.2.4	0xf67	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:26.957089901 CEST	1.1.1.1	192.168.2.4	0xf67	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:26.958148956 CEST	1.1.1.1	192.168.2.4	0xa108	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 13, 2024 20:26:27.553637028 CEST	1.1.1.1	192.168.2.4	0x7572	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:27.713597059 CEST	1.1.1.1	192.168.2.4	0xd3eb	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 13, 2024 20:26:27.714871883 CEST	1.1.1.1	192.168.2.4	0x8a61	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:27.714871883 CEST	1.1.1.1	192.168.2.4	0x8a61	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:28.240597010 CEST	1.1.1.1	192.168.2.4	0x7b0c	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:38.107333899 CEST	1.1.1.1	192.168.2.4	0x10f8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:26:38.107333899 CEST	1.1.1.1	192.168.2.4	0x10f8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:26:55.214900017 CEST	1.1.1.1	192.168.2.4	0xc7b8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:26:55.214900017 CEST	1.1.1.1	192.168.2.4	0xc7b8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:27:14.077379942 CEST	1.1.1.1	192.168.2.4	0x64f9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:27:14.077379942 CEST	1.1.1.1	192.168.2.4	0x64f9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:27:16.110969067 CEST	1.1.1.1	192.168.2.4	0x1add	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:27:16.110969067 CEST	1.1.1.1	192.168.2.4	0x1add	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:27:16.110969067 CEST	1.1.1.1	192.168.2.4	0x1add	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 13, 2024 20:27:34.487142086 CEST	1.1.1.1	192.168.2.4	0xf921	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 20:27:34.487142086 CEST	1.1.1.1	192.168.2.4	0xf921	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

telegiraum.club

www.cloudflare.com

ipinfo.io

fs.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:23.999308109 CEST	430	OUT	GET / HTTP/1.1 Host: telegiraum.club Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:24.917644024 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "803a3365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:24 GMT Content-Length: 31950 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 4b d3 3e 49 7a de b5 e7 53 b4 67 23 3b f0 5f 9d 95 e7 1c 69 14 8c 5a 6e 83 43 47 4b 83 64 6d 88 cc 3a cc 34 ee 99 1e 75 b7 3c 1a 13 2c 59 40 70 dc 40 04 3b 76 86 95 03 16 10 04 c6 5f c6 b2 61 c5 57 e0 ba fe f9 7b 14 72 60 c3 1b 3e 44 c0 6b de 45 5d 6f d6 93 95 95 95 95 79 9f f2 be eb fe e5 bf f0 6b bf f5 d9 ef fd 8d df fe 2b 9f fc e8 db 1f 7f f9 2b bf ec e3 27 5f ce 9f fc f0 7b df f9 db 3f fa f0 d9 6f 7e 47 a7 ee 79 fd ca bf f6 89 fe 7e f9 c7 f7 b7 f3 93 f3 47 f3 eb 6f ee 6f bf f7 9d 3f fe f6 f9 d0 bf c3 4f df 7e f1 ed 97 f7 af fc de fd e5 fd c3 af e7 8f 3f f9 fd 7b fd f2 a7 fb dc 9f bb f4 a7 5f 7f f5 d3 fb eb 6f 7f fe bd ef 7c f5 c3 ef 7e fc f5 3b 9f 9c 5f fd e4 db fb 27 6a ee cf 5f fb 9d 7f f2 55 df fe ec 8b 6f bf bd bf 7e fb a5 3f 99 3f be bf f7 9d bf 79 ff fc 67 5f 7d 7d 7d f3 ff 70 c5 5f f8 f0 e1 1f bb ec ba bf 39 bf fe e2 a7 df 7e f1 d5 4f fe dc 95 7f fa 1f fc 9d 7f f8 5f fe dd 3f fd 4f fe eb 3f fd 7b ff ed 9f fe e7 ff e9 9f fe 67 7f f7 4f ff c7 ff fe 1f fc [TRUNCATED] Data Ascii: K>IzSg#;_iZnCGKdm:4u<,Y@p@;v_aW{r`>DkE]oyk++'_{?o~Gy~Goo?O~?{_o\|~;_'j_Uo~??yg_}}}p_9~O_?O?{gOO?_o?G'N}\|,W>}~O'__~;_~oS=????}_zOO?~O?}__\|W?go_/o/~OW[\|/oO?<=_~>xw?_3?.__\|/O_j>/+OqY/>o~?l/w//_hZwC/B0E2>,:_SqYUbl3w<#x#KGWUcgu}n2-3q8=,y]y2wg?W%&Q5'y
Oct 13, 2024 20:26:24.917772055 CEST	1236	IN	Data Raw: fe 17 32 e6 3f 7f 8d f9 bf fb 27 df ff d9 1f 7c f1 fb df 7e fe d9 f3 3b ed fb ff 4a cc da 7f e1 23 98 19 c1 f3 fd ce d8 5f fe f4 e3 70 fe 33 89 11 7f f8 d9 6f fd d6 af 7f f2 07 5f cc af 7e ff fe e2 5f de cb f9 db e7 57 5f 7d f9 27 ba 8b 5a fa f4 Data Ascii: 2?'\|~;J#_p3o_~_W_}'Zo/{?8~7[g}O?/n':dAtMITK'xdYPY\V>
Oct 13, 2024 20:26:24.917788029 CEST	1236	IN	Data Raw: 74 81 86 ae 3d a1 c4 3a 75 f2 a6 21 16 c1 79 d3 b9 db dd 67 11 9c 9e fc 27 93 ff 64 f2 9b a3 0e 38 aa a4 fa 08 6a 25 5f 9b 69 49 ca e7 e4 56 a6 84 fb 19 af 58 c1 3d e6 17 33 fa e2 2d 5e 69 df f6 82 04 5e 85 f6 8a ee 78 15 ee 58 34 1c 57 a5 c6 66 Data Ascii: t=:u!yg'd8j%_iIVX=3-^i^xX4Wf,[#rmbNkR^[pyF,]ezhyk4yfpjEm9YSrr\RtQ\DpSson[6mxN8dHI78_5nKr^66Y
Oct 13, 2024 20:26:24.917804003 CEST	1236	IN	Data Raw: 1b 5a 5d ac 88 25 95 89 51 51 1b eb e5 16 a0 b6 f5 e2 0a 0c a0 15 1d b2 32 61 2a 04 b8 7a e2 54 64 dc 8a fa 58 99 23 cd 04 b8 a1 95 34 64 dc 06 ed 6d c8 b8 cd 02 4d 63 ce 34 4c e7 0d 59 a6 c5 f7 be ce fb 9b d7 79 b6 ae 91 d1 31 b2 75 8c cc 82 cd Data Ascii: Z]%QQ2azTdX#4dmMc4LYy1u,7rbpB^O\%]`GaO`.(LUyu%0bB('R}sD\|mNbESWS0-B)ekw''z$
Oct 13, 2024 20:26:24.917819023 CEST	1236	IN	Data Raw: 1b bf ef ed 10 e1 d4 c5 ed 55 e9 d9 d8 dd df 4e 7f 3b bd e9 b4 d8 e9 50 a7 eb dd b7 1f 34 3f 68 7e 50 79 d0 f2 36 ed 75 7c 17 85 9c 5f 5c b7 e8 ce 49 f9 7c 95 dd bd 93 8b 2f c6 e7 a2 91 8b ee de 9c bf e9 19 24 d9 3e 85 1d 5f c2 fe ec 0d 0f 21 c4 Data Ascii: UN;P4?h~Py6u\|_\I\|/$>_!\|&x}G'7=[DutPryPF[q63FoxwO6pGn9h.p]O/nE/yR'wdhzD^ZZBuaPX.\\|I
Oct 13, 2024 20:26:24.917834997 CEST	1236	IN	Data Raw: 7b ac f0 90 17 f2 23 a4 7a 20 06 8c 44 db 50 e9 81 44 30 d2 ab de 7e 3e be 9f d1 71 91 ef a3 88 63 0c e4 81 81 82 34 ca eb 47 8d dd 40 e6 1c d0 de c1 0c c1 31 5e 28 81 68 40 76 07 33 65 34 6e 8b ed 63 20 7b 0e 64 cf 01 25 1e 5d 8b 72 30 59 06 82 Data Ascii: {#z DPD0~>qc4G@1^(h@v3e4nc {d%]r0Y`rg@CdC2\|~)QB5 i0MKqgflEO^lxTNb3{M_Ox^Ow{]_MCLj^^8w3wCLj?\ia!5VXNB*!5VX;B2kL
Oct 13, 2024 20:26:24.917850018 CEST	1236	IN	Data Raw: 56 25 f9 54 b3 d0 14 19 6d 20 41 bb 12 f3 2f 59 3b c0 c3 be e3 61 2f 74 5b a8 08 09 8b 27 9e f5 c2 06 42 f0 a3 9b 8f af 4a 34 6f fd 21 a1 71 26 6b 9a 09 aa 96 50 32 53 f6 8d 91 4f 93 35 cd 84 90 9a 50 1e 52 7e 5d 41 9b 6c 8f 27 a8 5c 2a 26 e4 50 Data Ascii: V%Tm A/Y;a/t['BJ4o!q&kP2SO5PR~]Al'\&PPo-AwR{&\j^H8i@0/7FlMm#&Td4&P)Vz}cB!>{)^.P_\|aO&S`oih\|no<h(
Oct 13, 2024 20:26:24.917871952 CEST	1236	IN	Data Raw: a1 8d 68 90 76 c2 b9 09 00 69 04 80 34 02 40 84 9a 8b 7c e2 5a d8 5c e8 14 b8 e2 a1 e6 23 fa 7b b2 48 cf e7 f5 e3 6e 8e bc 11 cd 01 20 3a 2c 0a 2c fb 43 af 91 18 0f a1 c9 0d 1c fc 32 07 bf e0 dc d7 de fe 16 ba 0d 56 ea 15 4d 3f b6 14 2f 3c 5d e0 Data Ascii: hvi4@\|Z\#{Hn :,,C2VM?/<]VkpGdr\/UxW`^tU_4rEWlv6\ph0\|dw#DC/skPNdB'5hf^k})S`R6OWv%tM
Oct 13, 2024 20:26:24.917886019 CEST	332	IN	Data Raw: 81 1b c9 3b 84 ef 3c 23 44 79 b3 e3 57 e3 db d6 ad 61 97 6d f0 c7 86 30 dc 3c a5 1a 53 8a 18 9a d6 bc 69 d3 22 57 30 95 1a fb 36 2d 6a a6 92 58 42 18 5d a0 86 2d b3 0d 03 4f b3 4e d9 90 8b 1b 93 a8 d9 32 db 98 44 cd ec b0 c1 0e 5b f1 2d d9 ce 69 Data Ascii: ;<#DyWam0<Si"W06-jXB]-ON2D[-i66K+Clgh]bCLM#'504$4B:gaRVhF4{@ifMC}lDFloW\|5WDq"zFHiih)>SzC2UM F
Oct 13, 2024 20:26:24.917900085 CEST	1236	IN	Data Raw: cd 1e 2a 2b bb 5a 32 a9 18 88 aa b7 59 2a db 2c 95 45 4d a2 04 21 95 58 df 44 55 08 dd 9f ed 40 a4 95 ad 29 44 f6 84 46 f6 04 21 0f 8a 01 a9 56 5f 01 33 a8 5e ea 15 d3 6d b5 e9 b6 a2 16 d7 e6 c7 61 f1 13 76 21 92 71 80 5c 81 88 5c 6d 45 aa 6c db Data Ascii: +Z2Y,EM!XDU@)DF!V_3^mav!q\\mElGUoV/*4)};u!PgFo"4WGm]lj(y /-zQBcUh!,BSpvw;ho@,:hx-h%_Li
Oct 13, 2024 20:26:24.922918081 CEST	1236	IN	Data Raw: 00 44 bb 5a 12 82 db a2 25 85 88 86 10 bd 79 1e 51 13 a2 15 7f 82 6f 9b 83 6f 1b 59 a8 84 bc 17 13 0a b2 51 35 82 71 85 1e 28 b4 7f 52 51 35 42 6e 85 ef dd 30 fe 76 0f b1 60 b5 86 30 27 e1 00 17 b8 5f 6c 40 ef 0e 48 d9 01 43 79 30 ff 0d 98 3b 03 Data Ascii: DZ%yQooYQ5q(RQ5Bn0v`0'_l@HCy0;N:P]`+[`tj11"<]o.o%I`/PBZbCZZzPYNS#".0\|I"j`I9_9`[W>x8_{`j{E\|T#>JHW
Oct 13, 2024 20:26:25.174462080 CEST	348	OUT	GET /assets/css/font-awesome.min.css HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:25.499780893 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "803a3365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:24 GMT Content-Length: 5088 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 5c 4d 6f ec 38 76 dd f7 af a8 60 30 78 af 07 2e 3f b3 5c 9f 1e 24 e8 20 c0 00 03 74 90 45 67 99 0d 25 51 25 3e 4b a2 1e 25 d9 ae 0e e6 bf 87 94 ea e3 90 55 75 e4 01 7a 93 5e f4 83 a5 73 29 7e 1c 5e 5e 5e 1e d6 b7 bf fc cb 4f b3 bf cc 66 7f 33 75 37 fb f7 77 d5 9a 4a cd 96 8f 8b c7 a7 59 72 98 fd 92 c9 37 b5 97 75 76 98 cd 67 45 d7 35 2f df be e5 0e 29 47 e0 a3 36 ee f9 2f f0 64 28 eb 57 9d aa ba 55 f7 4c be 95 c7 f7 5f fd 47 5f 66 bf fd fd d7 d9 7f fd ed d7 99 78 14 0f b3 ff f8 ed b7 97 d9 7f fe fd bf 4f 85 fc ec 4a fc f6 d3 f0 89 79 2e 53 35 fb df 9f 66 b3 e3 5f 95 2e 0f 2f b3 2f be 94 63 cd bf fc d5 bd 6d 6d fa 32 eb 6d f9 f5 cb e3 e3 f0 e9 16 2b 30 7f 57 89 ff f3 51 99 ee cb cf ff 2c de 7d da 56 b2 fb fa 45 55 89 ca 32 95 cd 4d a3 ea ee d0 a8 2f 3f 3f b8 b2 66 9f 28 e8 dd e4 39 94 34 fe f9 59 e3 ae 43 db ce f6 ea 9f fb 78 fb b6 07 fb e1 af bf 9e 7a f4 5d e9 7d e1 06 a4 f6 6f cb f3 e3 b6 3b 94 ea f2 f4 1f 3f fd f4 98 cb 61 1c 32 dd 36 a5 74 63 a0 eb 52 d7 6a 9e 94 [TRUNCATED] Data Ascii: \Mo8v`0x.?\$ tEg%Q%>K%Uuz^s)~^^^Of3u7wJYr7uvgE5/)G6/d(WUL_G_fxOJy.S5f_.//cmm2m+0WQ,}VEU2M/??f(94YCxz]}o;?a26tcRj&}=,&f0h/PVwi>Uu;jG2+ueeV<,5r!X\|OU7vEwl.V>K]xvyvoWWoW6+\|KF,CX/FfyrXoTI6yHgZa c6Vo01B&)nyciE7i5tlb"T8c\t?m?)./Vfo>e9eFJFqc19M=YkAq:^nfr*Ur++._v%=yu] N}}~gn/M<}1mY<k:{>0J&txu(O_wnjjQDWx@^U_l?OT}Wi)u3/ 0'f0QjG+li#
Oct 13, 2024 20:26:25.501960993 CEST	363	OUT	GET /polyfills.9225875df2b05e64.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive Origin: http://telegiraum.club User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:25.818026066 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "803a3365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 13209 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc 7d 09 73 db b8 d2 e0 5f 91 58 29 3d b2 8c 68 ed f7 be af 6a 57 0a 46 e5 43 71 9c f1 35 b6 92 49 ac a7 d5 50 14 24 31 a6 48 85 87 6d 59 e6 7f df 6e 5c 04 0f 27 79 6f bf 3d a6 6a 22 e2 6e 34 fa 42 a3 01 5b 59 c2 5a 49 1a fb 5e 6a f5 ed 84 05 8b ee 23 9b 6d 5c ef fe 78 95 85 f7 ee fc 61 ba 89 e2 d4 9d 66 3e fd 61 e9 cb cb 78 e2 74 37 59 b2 b2 c7 e3 ff f8 fb ff 98 90 dd 7f fe a3 67 9f 30 32 67 64 c4 1c fa db ce 8b c2 24 6d 6d 18 b5 b2 70 ce 16 7e c8 e6 56 9b a6 db 0d 8b 16 ad 65 10 cd dc 60 b4 f2 93 4e a7 f8 26 87 cd b5 1f fd 70 1e 3d 76 3a e2 97 7c 68 ae 85 00 77 3a 4d 25 7f 46 f1 3d 8b 4f f9 38 b7 5e b4 61 9d 0e 56 6e f9 00 a1 1b 7a 3f a8 42 8e 19 dd b0 97 97 d7 e7 a0 e0 7f 79 39 84 7a 1f 18 59 33 ba c8 42 2f f5 a3 d0 7e 43 ba dd 6e c8 9c 9d bf b0 d7 ac 9b c6 6e 98 04 6e 0a 19 02 3b 1f a9 99 0b d5 a1 6e ff 0d fd 38 de 9f c0 27 fc 1e 4c f2 80 a5 ad 5b 1a 41 29 e6 be e9 c6 ee 23 7c 38 fd 45 14 db 58 f6 91 1e f4 3f be 7b d3 0d 58 b8 4c 57 fd 8f 7b 7b ce ed 1e 0d d9 f8 e3 [TRUNCATED] Data Ascii: }s_X)=hjWFCq5IP$1HmYn\'yo=j"n4B[YZI^j#m\xaf>axt7Yg02gd$mmp~Ve`N&p=v:\|hw:M%F=O8^aVnz?By9zY3B/~Cnnn;n8'L[A)#\|8EX?{XLW{{oQbfqV$2gQ=t3xMNa-= mAx`?):E E,NY?]c+daC}S4o"gZA=,gzYnurr{n(ZzVzqBH$\|N]\WsQd13>ya]2<o:i]`g#{jdDwXe~d}y3Ys8.` oAwgrm+9w-MhNSjsd{$s8R%%KAt7faJS",.~pV98,You:QHrYx\Pbr2^[q?\|dn3MZs2<]i-D9/xc?MYgx5=-E'o:DvAXk)kYdnn\|1]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:25.174695969 CEST	345	OUT	GET /assets/css/bootstrap.min.css HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:25.494906902 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "803a3365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:24 GMT Content-Length: 26177 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 7b 8f 23 b9 91 20 fe ff 7c 0a ad 07 8d ea f6 94 d4 ca 94 52 8f 1a f4 60 6d 63 17 b7 c0 8c ff f0 dc 02 07 cc cd 01 29 65 aa 24 b7 5e 97 52 75 a9 67 31 bf cf fe e3 9b 41 32 f8 c8 2c a9 ba cf de f5 da ad ca 64 3c 18 0c 06 19 41 66 c4 fb 3f fe cb 37 bd 3f f6 fe 7c 38 9c 4f e7 a6 3c f6 3e 8d 07 c5 60 d8 7b bb 3e 9f 8f a7 87 f7 ef 1f eb f3 42 be 1c 2c 0f bb f7 ef 68 fb bf 1c 8e 9f 9b cd e3 fa dc cb 87 59 d6 cf 87 f9 b0 f7 3f d7 35 c0 f3 a7 a7 f3 fa d0 9c bc 8d 9f 37 e7 73 dd dc f7 fe 63 bf 1c d0 46 3f 6e 96 f5 fe 54 57 bd a7 7d 55 37 bd 9f fe e3 7f 02 1e 36 e7 f5 d3 82 51 3f 3f 2f 4e ef 15 43 ef 17 db c3 e2 fd ae 3c 11 54 ef 7f fc 8f bf fc db 5f 7f fe 37 ca df fb 6f be 79 68 48 a3 de 7f 7d d3 eb f5 fb 8b ed 53 fd d0 fb 76 38 9c 2e 56 ab ef d9 a3 cd be da 3c 1e c8 c3 c9 24 1b ae 72 fe f0 f8 d4 1c b7 b4 e5 64 35 ce 97 99 78 b8 d9 7f 24 8f ea d9 a8 9e 2d f9 a3 a6 ae c8 93 6a 39 2a c6 05 7f 72 68 ca fd 23 85 5c 55 d3 3a 1b f3 87 9f eb ed f6 f0 4c 1f ae 96 d9 70 ca 1f 3e 36 [TRUNCATED] Data Ascii: {# \|R`mc)e$^Rug1A2,d<Af?7?\|8O<>`{>B,hY?57scF?nTW}U76Q??/NC<T_7oyhH}Sv8.V<$rd5x$-j9rh#\U:Lp>6u'Y9G\|.-?U6-?z^ocS~.UPGQ9N4]\|p}C,>,.7fl$@VU):.x<l0>=ztr8ovdPfK8s=Cju Wn?QY=hFhK7\?=A5\| GT7%{?&D=4$'?-;]\u:D%z%\Kt'EaQr9<52cZ?18o~?PD'?lN.i!3O1yem@>7Du]szqs&r~YD[o&L'K'{yS!c)O<.#:gb>67rCZO9E{TmN-l-?2C#qot?S\w[zz?u;!#
Oct 13, 2024 20:26:25.494951010 CEST	224	IN	Data Raw: 3b f5 e8 59 0c e0 78 38 44 06 95 8d a9 18 9b 6f f3 2c 2f f2 39 7d c2 46 b7 24 23 47 64 b5 ad 57 67 fa 6c 51 2e 3f 52 c9 ef 2b 39 98 dc 48 12 f9 fe 72 2e 17 c4 d6 d7 97 0f 77 fd ec ee d7 87 d5 61 f9 74 7a d8 1f ce 6f f9 cf fe a7 cd 69 b3 d8 d6 ef Data Ascii: ;Yx8Do,/9}F$#GdWglQ.?R+9Hr.watzoi 2\mX7q&>##1oA;?x@\| &o8(c@&EKUKHmHr?o{p2VdQST"B[*B0-
Oct 13, 2024 20:26:25.494965076 CEST	1236	IN	Data Raw: 9f 9a 13 1d ad 75 bd 3d b2 71 94 96 40 f4 39 40 b5 7f fa b8 39 f6 d9 d2 bc 3f 70 fe 62 2d a8 2c aa aa 21 0b 1b 14 a0 29 2f a9 ac e7 cf 74 1f b0 3f 34 bb 72 eb e8 e6 66 bf 26 93 85 eb 45 b5 bd ff e6 40 fe fb b4 6d 37 2a 87 6d ef c0 40 7b 4f 1c 5a Data Ascii: u=q@9@9?pb-,!)/t?4rf&E@m7m@{OZ 1IPZgmZ^#1#3bsA9]dbNDJf>6\|HaT[bZqI&c[9iBtAfcB^%{9+2B\L#S
Oct 13, 2024 20:26:25.494981050 CEST	1236	IN	Data Raw: bb c7 fe 6a fb b4 91 91 12 67 e7 e0 2c 9b 0c e4 bc 26 ab ee be dc 6c 1d f5 92 13 ca 17 7e d4 f3 41 ab ff b7 55 5d e7 f5 04 cc 0f e5 d8 68 84 49 bc 01 a7 35 a0 39 bc 55 5f 7a b0 de 55 c4 34 00 06 2c f4 32 5d cd 41 86 88 c6 11 9c 29 3c 1d 14 46 7b Data Ascii: jg,&l~AU]hI59U_zU4,2]A)<F{}\|v2DBfUI9Fh;FR)m=!=zDWm&gc: <TJLER>(HKi/SI`Y` +cfG{
Oct 13, 2024 20:26:25.494996071 CEST	1236	IN	Data Raw: 99 5c cd 60 c8 10 10 8e d0 ab 37 85 5f 71 0a bf e6 cc 50 2a 13 af e6 4c fc 9a 33 f1 6b ce 1c a5 32 75 35 67 8a 68 ce 14 d1 1c b1 20 86 5d 09 bf 33 e1 75 27 6c 32 f8 dc 9d 7b 75 67 ee d7 9d b9 5f 77 32 cf fc ed b6 94 89 4b 84 3b e0 6f f8 3c 0e c3 Data Ascii: \`7_qPL3k2u5gh ]3u'l2{ug_w2K;o<ps>z`\|TMdy b{ ,<Y S"3!scSU#YiRS" e[0cEmX[ly d
Oct 13, 2024 20:26:25.495012045 CEST	1236	IN	Data Raw: b3 aa 14 f5 56 2c 28 7c 14 d4 5b 97 0c 90 bf 7e e4 6a 81 a4 3c 2d 17 16 65 2e 22 13 05 90 1b c2 fd 7c b5 ac 92 71 18 b2 09 b7 5b a7 13 54 85 b8 ee 9d 27 26 45 e3 b1 97 40 35 a9 66 d5 02 25 e0 19 11 f0 1e 23 06 46 05 3e f4 8f cb 62 b4 98 2e 16 5e Data Ascii: V,(\|[~j<-e."\|q[T'&E@5f%#F>b.^cYlt52,j.8"<f~IoXd*4Xi{IG>cv0z_YOJ\TU] lN'%j[C/%#w%
Oct 13, 2024 20:26:25.495037079 CEST	1236	IN	Data Raw: 03 7c bd 12 47 68 85 23 55 0a 45 31 a3 0a 15 81 27 09 65 8a d0 4a 2b 26 76 56 70 9a c3 a2 b5 5c 5c d1 59 75 5b 1c e1 31 8c 7d 5d fc 5c e3 2d 17 c4 24 3c 9d 6b 77 00 46 66 4d 52 59 e9 29 84 5b ed 59 7a ff 5f 0f be 64 36 fc de 6d ff 8b 6c ff 2b 06 Data Ascii: \|Gh#UE1'eJ+&vVp\\Yu[1}]\-$<kwFfMRY)[Yz_d6ml+n,kOUAQCDqGL+CMe-}Jcp]Lt&56x33tQ`hSWu]ww65Pw*zo0FI,Z&Y!-<9dzC5rd6la
Oct 13, 2024 20:26:25.495052099 CEST	1236	IN	Data Raw: 65 be fa 3b 19 e3 cd ea 33 9b 1d e4 b1 f9 12 bb 7b f8 bb d3 17 fb 62 57 c7 1e a5 a4 c0 0c 8c b9 77 d4 3b ca ac 4d df cd 0f 0c ec 6b 41 ee 57 37 ba 43 76 d2 a2 dd a6 aa b6 75 02 2d eb 76 69 80 2a 82 c8 d8 92 de 3b af f9 b5 76 38 a0 16 df 5e de d4 Data Ascii: e;3{bWw;MkAW7Cvu-vi*;v8^Un_?<1L\\|Z7G{RQWr7lM\|EAGYC#O7j0}^}f_8?>Ll,3-HoG_M0S^
Oct 13, 2024 20:26:25.495068073 CEST	776	IN	Data Raw: 4f d8 5e a0 47 9d 67 df 15 4e dc a2 dd bf b2 82 21 27 70 c9 e7 3d 16 92 76 5b c7 8e 44 f0 d9 e7 9c bf b5 fa f8 3b 20 18 ef bc 0b 1d a5 81 be b5 9c 75 ed 0f d0 5a 81 46 66 dc 8b 0e d4 3a 6b 4d f7 d9 f6 d2 03 b6 48 c7 af a9 4e ce 81 5b f2 61 0f c4 Data Ascii: O^GgN!'p=v[D; uZFf:kMHN[axtzYmuD!iftj{^P/9?B`k8qtECwuYUp(4<^\|HYw:OE~MBmL4y/,~d@
Oct 13, 2024 20:26:25.495085001 CEST	1236	IN	Data Raw: f2 89 d7 2c 13 6b d7 73 cf 8a 68 66 5c 43 fa 6c 60 d8 10 34 b0 aa 18 10 b7 0b d2 28 0f 14 96 90 e3 00 aa 28 59 2c 67 8f 89 f2 b4 d3 8c 38 ac 18 63 ff 3b 0e ad 79 32 b9 32 f9 b2 8b 3e 6b de a6 93 99 8f b7 5d f5 12 de 08 f4 4b 79 9b cf 73 1f 6f db Data Ascii: ,kshf\Cl`4((Y,g8c;y22>k]KysoiB_[>.0G[1'M:b]UY<,7x@B\|9{"+.c$)KnMkX=U?^`g"<dh`fR\Gm{nq@: +*jFJq^K\
Oct 13, 2024 20:26:25.500026941 CEST	1236	IN	Data Raw: a2 cb 70 0b de 7d 03 de 85 34 da 20 75 c0 43 ad 23 03 ee 82 06 07 3c d8 3c 36 e0 b7 b9 f0 de 6e aa 21 63 83 c5 67 33 18 86 05 f0 a4 25 2a 69 b0 41 e4 4d d2 c3 7c f7 dd 08 d8 c2 4e f0 52 10 ac fe e8 65 37 d8 b0 b6 b5 51 b5 b6 7a 76 ed 7d 77 e2 dc Data Ascii: p}4 uC#<<6n!cg3%*iAM\|NRe7Qzv}w:<{o51Fq b:6]`${meLVk_ 0w+FEtg\|U0Nj~AH?>5^N4VKpQ;g}(..u9{TM/\kL/z
Oct 13, 2024 20:26:25.708956003 CEST	358	OUT	GET /main.7b574a882822896f.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive Origin: http://telegiraum.club User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:26.259679079 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:05:12 GMT Accept-Ranges: bytes ETag: "084bd7dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 216842 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac bd 8b 7f d3 c6 b2 38 fe af 38 be 7c 5c e9 66 e3 da e6 51 6a 47 f1 a5 10 38 e9 81 40 09 7d 50 d7 37 28 f6 26 51 91 a5 54 92 03 69 ec f3 b7 ff 66 66 5f b3 b2 1c e8 ef 7b 3f e7 94 c8 ab d5 3e 67 67 e7 3d 41 29 d3 f3 ee 27 79 76 15 cf 3e 3e bd 5c 66 1f e3 f9 f5 e9 55 5e 54 f1 e9 32 89 ee 7c bb 5a 4d a6 61 f7 6a 59 5e 06 93 49 ff bb ef a7 e2 f6 bb 07 0f 86 c1 b5 14 b9 14 bf 84 d1 c1 6d 7b 59 ca 56 59 15 c9 ac 6a 8f ce 97 d9 ac 4a f2 ac f5 2e a8 c2 db 42 56 cb 22 6b 9b c2 76 14 55 37 57 32 3f 6f 55 eb 54 56 ad 4f d1 4e 7f 34 cb b3 b2 6a bd 8c 6e df 14 f9 22 29 e5 f0 3a 4f e6 ad 9e 28 a1 02 b4 fc 4c 5e 15 72 16 57 72 7e 72 93 cd 2e 8b 3c cb 97 e5 61 51 e4 c5 bf e2 6c 9e 26 d9 05 76 94 9c e3 bf aa a9 2c ca e4 a7 16 55 a1 c6 f3 54 76 3f c5 45 16 b4 9f 1d be 79 7b f8 f4 c9 bb c3 67 3b ad b7 9f 7f 3c 69 7d 8a cb 16 f6 53 e5 d8 55 6b 6e fb 6a 95 ae b3 96 c4 a6 5a 97 ba bb d6 99 bc 8c af 13 28 39 bb 69 cd f2 b9 6c c5 d5 b0 f5 47 d6 de cd ba 65 05 6b 18 ae 65 0a 8d 7d ea 74 4c ef [TRUNCATED] Data Ascii: 88\|\fQjG8@}P7(&QTiff_{?>gg=A)'yv>>\fU^T2\|ZMajY^Im{YVYjJ.BV"kvU7W2?oUTVON4jn"):O(L^rWr~r.<aQl&v,UTv?Ey{g;<i}SUknjZ(9ilGeke}tLi~aLUB7nA?[7Gj-.z->n3D%/ }ONOdsQW#+p[IQ7UPEU3Y0(2.C7Xe@e2?S1R3z 8M2)Cv,en3=f/eV.Y\a?2f_m$uw+U~RWAv?V?2jK#@~TUW9>zMkv(Poa0G4.udT^]W\|E%6jq&#bp~ bFxXB5g(Ea"xB[f,[,b[E~-P@GZexK(Fy('>\|!=\|GUqsAysvm\|xWAa(Bw5t<(CyqTQ`qh4;_AuP>3A
Oct 13, 2024 20:26:26.264607906 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:05:12 GMT Accept-Ranges: bytes ETag: "084bd7dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 216842 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac bd 8b 7f d3 c6 b2 38 fe af 38 be 7c 5c e9 66 e3 da e6 51 6a 47 f1 a5 10 38 e9 81 40 09 7d 50 d7 37 28 f6 26 51 91 a5 54 92 03 69 ec f3 b7 ff 66 66 5f b3 b2 1c e8 ef 7b 3f e7 94 c8 ab d5 3e 67 67 e7 3d 41 29 d3 f3 ee 27 79 76 15 cf 3e 3e bd 5c 66 1f e3 f9 f5 e9 55 5e 54 f1 e9 32 89 ee 7c bb 5a 4d a6 61 f7 6a 59 5e 06 93 49 ff bb ef a7 e2 f6 bb 07 0f 86 c1 b5 14 b9 14 bf 84 d1 c1 6d 7b 59 ca 56 59 15 c9 ac 6a 8f ce 97 d9 ac 4a f2 ac f5 2e a8 c2 db 42 56 cb 22 6b 9b c2 76 14 55 37 57 32 3f 6f 55 eb 54 56 ad 4f d1 4e 7f 34 cb b3 b2 6a bd 8c 6e df 14 f9 22 29 e5 f0 3a 4f e6 ad 9e 28 a1 02 b4 fc 4c 5e 15 72 16 57 72 7e 72 93 cd 2e 8b 3c cb 97 e5 61 51 e4 c5 bf e2 6c 9e 26 d9 05 76 94 9c e3 bf aa a9 2c ca e4 a7 16 55 a1 c6 f3 54 76 3f c5 45 16 b4 9f 1d be 79 7b f8 f4 c9 bb c3 67 3b ad b7 9f 7f 3c 69 7d 8a cb 16 f6 53 e5 d8 55 6b 6e fb 6a 95 ae b3 96 c4 a6 5a 97 ba bb d6 99 bc 8c af 13 28 39 bb 69 cd f2 b9 6c c5 d5 b0 f5 47 d6 de cd ba 65 05 6b 18 ae 65 0a 8d 7d ea 74 4c ef [TRUNCATED] Data Ascii: 88\|\fQjG8@}P7(&QTiff_{?>gg=A)'yv>>\fU^T2\|ZMajY^Im{YVYjJ.BV"kvU7W2?oUTVON4jn"):O(L^rWr~r.<aQl&v,UTv?Ey{g;<i}SUknjZ(9ilGeke}tLi~aLUB7nA?[7Gj-.z->n3D%/ }ONOdsQW#+p[IQ7UPEU3Y0(2.C7Xe@e2?S1R3z 8M2)Cv,en3=f/eV.Y\a?2f_m$uw+U~RWAv?V?2jK#@~TUW9>zMkv(Poa0G4.udT^]W\|E%6jq&#bp~ bFxXB5g(Ea"xB[f,[,b[E~-P@GZexK(Fy('>\|!=\|GUqsAysvm\|xWAa(Bw5t<(CyqTQ`qh4;_AuP>3A
Oct 13, 2024 20:26:26.737786055 CEST	386	OUT	GET /assets/layui-v2.6.8/layui/css/modules/layer/default/layer.css?v=3.5.1 HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.051728964 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "8e6fe265dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 4173 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 c6 65 76 bd 2e b6 e9 df bc de 2e 16 17 93 ac 1e 25 dd 0f db a2 4d b3 ce c7 6d 36 49 c3 0f 8a b6 cc d3 66 95 2d bb 2d f9 8b 5f 9c a4 69 9b bf 6b b7 ab cb bc 3e 2f ab ab 47 69 5e 96 c5 aa 29 9a 43 fa ea 6a 5e b4 f9 36 bd 3d cd 1f a5 cb ea aa ce 56 87 c9 2f 49 92 79 bb 28 d3 1f 27 40 eb 62 da 34 02 91 61 cd 8a 66 45 7f a1 f1 32 07 84 55 d5 14 6d 51 2d 1f a5 d9 a4 a9 ca 75 cb 9f 5e 15 b3 76 fe 28 dd 7d 78 f0 70 f5 8e 21 fa b8 75 30 6d e6 d9 4c 30 75 c0 ce 8b 77 f9 0c 90 7e 7f f7 99 df c1 aa 2a 96 2d bd 9b 5f e6 cb b6 a1 ef d6 6d d5 eb c7 83 dc 56 ab 47 e9 0e de 2c f3 f3 56 7f 35 58 ee ec fc ee f8 73 9e 17 17 73 fa ce fc fd fb 9b 0f f2 77 ab 3a 6f 1a 42 62 6b 56 4d d7 0b ea 72 3c a9 [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"ev..%Mm6If--_ik>/Gi^)Cj^6=V/Iy('@b4afE2UmQ-u^v(}xp!u0mL0uw~-_mVG,V5Xssw:oBbkVMr<f[i~~zU>y[inuExDstHDY}QU6{$r=~91]-hHlfR3S5QqOzTt;?JkbQylzN:/bd_vq%.2TRVL0~r_m/;H8e]<kiJ/]]1+">eJy$'e5}r}Z;qw[Lr;+H>2-@8ywEjh{~(izr5vh r#p(~ C N?-w-2mAn7-i> 4aFJel]/@x_"oRArBDgKB`3GO!9j"@Clo}E]`@/~go@f_V6h/mp3\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:25.180311918 CEST	331	OUT	GET /assets/js/jquery-3.5.1.min.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:26.260791063 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "0d1cb65dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 40582 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 69 77 db 46 d2 28 fc 3d bf 02 cc f8 19 00 16 45 4b f6 64 ee 0d bd e8 38 b2 93 78 26 ce 62 39 93 64 28 26 07 22 9b 12 62 0a 60 00 50 4b 2c cd 6f 7f bb aa 7a 5f 40 ca c9 33 e7 be 3c c7 16 09 f4 de d5 d5 b5 d7 83 fb 83 e4 d7 ef d6 ac b9 4e 2e 1e 8d 3e 19 ed 27 37 49 36 cb 93 7f 1c 25 9f d7 eb 6a 5e 74 65 5d 25 45 35 4f ea ee 8c 35 c9 ac ae ba a6 3c 59 77 75 d3 f2 a2 bf fe 06 55 47 75 73 fa 60 59 ce 58 d5 b2 e4 fe 83 8f 06 d9 62 5d cd b0 66 c6 86 49 97 27 ef 3f 4a 92 74 cd df b6 bc f6 ac 4b 1f c3 ef fa e4 57 c6 bf 27 4f 9f 26 dd f5 8a d5 8b e4 bc 9e af 97 2c f9 eb 5f e3 2f 47 ec 6a 55 37 5d cb 1b 48 92 83 24 b3 9f 26 4f 13 36 9a d7 b3 f5 39 ab 3a 2c 42 c5 3a 18 c7 60 2f 57 8f c6 89 31 44 1a 9f fe 94 8b 24 1b e8 76 72 eb 65 92 74 67 4d 7d 99 54 ec 32 79 d9 34 75 93 a5 62 01 1b f6 db ba 6c 58 9b 14 c9 65 59 cd 79 99 cb b2 3b e3 bf 64 43 69 fe d8 6a aa 61 dd ba a9 60 70 d6 8b 5b ea 70 2c 5e dc e6 59 ca 77 82 2d ca 8a cd d3 64 a0 16 44 74 72 20 bf f0 0a 67 65 3b 34 66 76 [TRUNCATED] Data Ascii: iwF(=EKd8x&b9d(&"b`PK,oz_@3<N.>'7I6%j^te]%E5O5<YwuUGus`YXb]fI'?JtKW'O&,_/GjU7]H$&O69:,B:`/W1D$vretgM}T2y4ublXeYy;dCija`p[p,^Yw-dDtr ge;4fv8LXx/&jMC%jF-1=8e!W rX\|4+KkmoX{b5DC[V~/xW>S\|vV\V\|-VM\8YA%9Z_O'Zx69{EW%2Cls__a_-4Fsxkb\|{TM2VtH5J#8YV:vr@5.&>B.$k<@GU`b0\X1d\:k[LJ]3H0$iKG2XT+A65a\|R R#7'1hQWvTD+=s%NvvDO$\d"94opei=\|2uv0}d) PpKy4ZI<"rONc93~#>N~S06
Oct 13, 2024 20:26:26.260821104 CEST	224	IN	Data Raw: 72 b4 b4 d9 70 35 28 5c 79 2b 9b e0 e0 1e 45 bb 11 30 24 20 32 5b 35 5e 8c f9 3e 3d 49 f6 ac a2 50 66 02 a0 0b 5f c4 06 4e ad 3a 54 62 ea 8d 0e 70 f8 51 57 cc de 45 c7 28 01 e6 68 74 ce 9a 53 86 e3 19 19 cb 97 e5 f6 15 21 41 84 df 0f 0d bb 20 6c Data Ascii: rp5(\y+E0$ 2[5^>=IPf_N:TbpQWE(htS!A l(+fgh2{l4V+V{.q(nJ0[q6_Mm8-/k63kNv:y?W#46g
Oct 13, 2024 20:26:26.260852098 CEST	1236	IN	Data Raw: ec a1 d1 2c a0 bd 1d 38 f9 19 62 05 c0 05 fc b4 ef f9 e7 d1 99 1c c7 aa 80 93 39 5a ad 10 bf 1e 24 13 44 11 d5 74 ca eb 4f a6 81 31 56 db ad 9f 3e f4 fc e2 f3 91 45 10 03 8d 93 b5 3a 24 9c c7 18 03 21 cc ff aa 67 2b 3a 39 fc 29 7e a3 1b 4e 90 80 Data Ascii: ,8b9Z$DtO1V>E:$!g+:9)~Nsq/y0CeeBv?Gi@:{%N7*w.}zRKVXDH{eH0s\|jvg'7;r?mVw-4oww-r8[[vv0Pm?9E\
Oct 13, 2024 20:26:26.260884047 CEST	1236	IN	Data Raw: e9 ec 8c cd de b1 f9 4d cb 96 1c de f9 97 a2 bd ae 66 37 c5 ba ab 17 7c 53 5b fc c6 89 ee eb 1b d4 9c d6 cb f6 66 ce 16 ac b9 99 97 6d 71 b2 e4 15 ce ca f9 9c 55 37 65 cb 11 ee cd 92 93 cc 37 e7 eb 65 57 ae 96 ec 86 af 68 75 c3 29 89 79 5d 2d af Data Ascii: Mf7\|S[fmqU7e7eWhu)y]-oz5/k9>SU9`\|?]<\|~[k{zp{;xh3+USor{7L=<LvO:7=cozz;>
Oct 13, 2024 20:26:26.260915995 CEST	448	IN	Data Raw: 7d a3 cb 0c 54 b7 ff 1e b1 2b 36 03 80 72 d5 97 28 ec 5a 4f f6 a7 8e 14 9d de 7e 8a 67 78 e5 c3 16 0e 09 75 a8 0c ac e4 84 4d de 67 d7 af e6 59 09 76 72 3e 0b ad eb 15 a3 72 8e ed 96 ba 1c c9 d6 40 0d ec 54 11 12 77 a8 b7 20 d5 18 e0 b4 40 9f f0 Data Ascii: }T+6r(ZO~gxuMgYvr>r@Tw @O!ugk<KTnc0goSvd,h0EhP9B~I)i,D\|*X_w,omap~I:unxN.Fk;X2c0nvClctw,211~
Oct 13, 2024 20:26:26.260946989 CEST	1236	IN	Data Raw: 46 11 0d ab e2 78 c9 86 94 68 e6 81 15 9a 20 71 42 f3 e4 59 72 c2 c9 8f d9 19 fb 8a 6e 77 80 5e be b8 9c b9 61 93 66 d4 9e 95 8b 2e cb a7 26 00 71 52 41 9d 6f 7e 3f 86 a8 f9 e0 6c 96 2c 60 97 ce 1b 3b 9a 4a 31 33 0b d6 9b 59 f5 a4 d9 d9 a1 6b 1f Data Ascii: Fxh qBYrnw^af.&qRAo~?l,`;J13YkQ5$;dFOa\|#!{8S]0D)eSArNmdTpKNM)wE^zFM4`1 mxE)f^'0;I5Zn%-t8di#~8
Oct 13, 2024 20:26:26.260979891 CEST	1236	IN	Data Raw: fd d8 b3 a6 81 cf 51 f0 e9 c7 e9 b3 27 0f 8a 67 4f c8 e2 ec ee d5 77 c1 ae 2b 4d ce db 62 b9 ac 2f 67 c5 8a 6f 08 7b 9a f2 56 eb 95 30 82 20 33 71 7c f6 80 1e f2 2f f4 f8 d9 c7 41 07 d3 00 b7 f8 f1 c4 ee e2 67 de de f4 63 49 ad c7 88 97 0b 3a 4d Data Ascii: Q'gOw+Mb/go{V0 3q\|/AgcI:M)OOv`[#H'rSFN_u#y9N*ZCPdyPA:ZL>hJ;9>E/m[/Esb#K60(a?M7
Oct 13, 2024 20:26:26.261013985 CEST	1236	IN	Data Raw: ae ca df d6 ec 88 0c 69 83 3d 3a e6 a5 95 a3 46 75 a8 a6 d2 f4 ae 75 1c 49 91 32 e3 67 9f 75 fc dc bf 58 43 ac e0 a2 b3 3c 92 d1 6f 53 90 f8 47 1d 88 f2 c8 70 5b f8 99 9b 68 9d 61 a1 ec 85 f1 68 a9 70 97 71 ba 4d 46 94 49 4d ab 60 3f 27 25 59 40 Data Ascii: i=:FuuI2guXC<oSGp[hahpqMFIM`?'%Y@tf`YWy-}\'\l{9v`hHR9hnHg$*?_sl(6"-a%j%tY4F;>`K/8Um W{THCm[
Oct 13, 2024 20:26:26.261048079 CEST	1236	IN	Data Raw: 9b 3c 35 10 a9 0f c5 f4 10 8d 6e 18 5f 1d 18 75 0b 05 67 46 5c 4b c8 4a b6 c9 13 0d c3 11 ec ec 60 5d cc 14 82 47 0e e7 8e d1 26 d0 9d 0d 7e ae 21 82 7f 96 6f f0 57 73 4f 03 b4 b8 b3 33 a7 d6 7b fd 82 44 1b b0 44 1c 9c de 0d 39 4a 4e e6 d3 f8 59 Data Ascii: <5n_ugF\KJ`]G&~!oWsO3{DD9JNYH<;'4^Ab&b#t]P~p3L7&l[)+f"BruE;R0OvM+A@>z:"%3Arm]dzhcu8tbO}UPt]
Oct 13, 2024 20:26:26.261079073 CEST	1236	IN	Data Raw: 4c e3 66 c0 89 46 0e 2d 50 1d 1b 5e 72 ca 24 0d f1 9f 2a 75 b0 59 2e 61 f1 1e 93 f5 54 38 c0 7b 39 22 f8 18 17 8a bc 68 55 6b 61 32 c3 a2 3e 34 13 b2 85 98 24 68 42 e0 49 84 ea 80 30 17 25 df 2b 47 17 25 52 4e b8 9c aa 3f 69 ef 2a 42 ad 69 64 15 Data Ascii: LfF-P^r$uY.aT8{9"hUka2>4$hBI0%+G%RN?iBidtVM #Xs;=B0`mjU`ZRr}Il0Lk]/2E]o<_~s*o[ .dzTel@#r41C2gno!;
Oct 13, 2024 20:26:26.261612892 CEST	1236	IN	Data Raw: e1 ec 33 91 e9 fa 92 b1 41 15 c0 d3 26 36 30 e0 56 9a 18 82 79 1a ff a9 5d c7 e1 c2 bc 82 13 d8 e6 01 b0 d6 03 c4 14 dd 2d c5 5c 04 c0 fd e0 73 7c 61 ff bc b6 7f 9e db 3f af fa 71 40 80 51 ad 03 cf 60 45 9f 47 0f f8 c0 3b 82 94 56 91 bc bf 29 e3 Data Ascii: 3A&60Vy]-\s\|a?q@Q`EG;V)Lepa6Rl@Rn7{n ]lPtPL^+Q"ZzB.8+-$\|cd()(Rwv`^)y}!8K
Oct 13, 2024 20:26:26.489254951 CEST	356	OUT	GET /assets/layui-v2.6.8/layui/css/layui.css HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:26.806284904 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "0d1cb65dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 15097 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 7d 6b 93 e3 38 8e e0 f7 fe 15 be e8 e8 a8 ca 9e 74 8d 2c 3f 33 2b ba 6f 1e b7 3b 33 7b bb 73 b7 3b 8f b8 b9 ee 8e 0d d9 96 d3 8a 92 2d af 24 57 66 f5 46 ff f7 23 29 52 22 41 00 a4 9c d5 7b bb 9d 53 39 29 89 04 49 10 04 40 10 00 df 95 d9 a7 6b 31 2d ce 65 71 ce ef bf 28 4e 4f 93 7f ff 62 32 d9 17 cd 45 7c 79 9c 74 1f a6 db b2 da 7d 78 2f 3e 7c cc eb b6 d8 65 e5 34 2b 8b a7 f3 e3 e4 54 ec f7 65 fe fe 8b 9f be f8 e2 38 bb ff e2 98 8a 7f 73 f1 6f 21 fe 2d c5 bf 95 02 77 a8 ce ed f4 39 2f 9e 8e ed e3 64 91 24 aa 7c 76 ff c5 b6 da 7f 52 05 76 55 59 d5 8f 93 2f e7 f3 b9 fa a6 bb 95 ef 9f 44 a7 f4 c3 31 cf f6 79 dd 3f 9a 2e eb c7 53 56 9c 15 a8 4b d5 14 6d 51 89 be d5 79 99 b5 c5 c7 dc 87 78 ac 55 d1 a3 ee 51 22 47 56 89 a1 1d ca ea f9 71 72 14 63 ca cf 76 2d f1 bb ba b6 53 d9 dd be c1 a6 d8 e7 ce c3 b4 d9 d5 55 59 2a c8 06 d8 f4 05 03 e7 0c 2b 2f 8b 4b df 23 ae 13 db f6 7c 8f 42 80 93 c7 cc 11 02 4a 4c 75 b6 2d f3 fd 00 6e 57 0d 5f af e7 26 2f f3 5d ab 00 4f 4f d5 8f d3 6b [TRUNCATED] Data Ascii: }k8t,?3+o;3{s;-$WfF#)R"A{S9)I@k1-eq(NOb2E\|yt}x/>\|e4+Te8so!-w9/d$\|vRvUY/D1y?.SVKmQyxUQ"GVqrcv-SUY+/K#\|BJLu-nW_&/]OOk\s<1EK\|<5EVv(~_{O/WQ,DK-`JYjk_\9eSq3P2=(%L5Omr?1I:vSym(mUpP}Y4i?3cU(K#K3YM;K:klkUW!?t36 qtNE1\|mXMLjX$^N~PJT7O8AR\yYy1Kt-&O9;V'u&;7b`CDPMV.Ufm%$ MUy<PD>H9E3z:z3:^XNEfm~rs3x_MKERbWVg)5\$}c~\|mq4ybI^D[04k ~BB=@JnT
Oct 13, 2024 20:26:27.013046026 CEST	369	OUT	GET /assets/datas/countries/phoneCode.json HTTP/1.1 Host: telegiraum.club Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.318758011 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "9f216565dbfeda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 3756 Data Raw: 7b 0a 20 20 22 41 46 22 3a 20 22 39 33 22 2c 0a 20 20 22 41 58 22 3a 20 22 2b 33 35 38 31 38 22 2c 0a 20 20 22 41 4c 22 3a 20 22 33 35 35 22 2c 0a 20 20 22 44 5a 22 3a 20 22 32 31 33 22 2c 0a 20 20 22 41 53 22 3a 20 22 2b 31 36 38 34 22 2c 0a 20 20 22 41 44 22 3a 20 22 33 37 36 22 2c 0a 20 20 22 41 4f 22 3a 20 22 32 34 34 22 2c 0a 20 20 22 41 49 22 3a 20 22 2b 31 32 36 34 22 2c 0a 20 20 22 41 51 22 3a 20 22 22 2c 0a 20 20 22 41 47 22 3a 20 22 2b 31 32 36 38 22 2c 0a 20 20 22 41 52 22 3a 20 22 35 34 22 2c 0a 20 20 22 41 4d 22 3a 20 22 33 37 34 22 2c 0a 20 20 22 41 57 22 3a 20 22 32 39 37 22 2c 0a 20 20 22 41 55 22 3a 20 22 36 31 22 2c 0a 20 20 22 41 54 22 3a 20 22 34 33 22 2c 0a 20 20 22 41 5a 22 3a 20 22 39 39 34 22 2c 0a 20 20 22 42 53 22 3a 20 22 2b 31 32 34 32 22 2c 0a 20 20 22 42 48 22 3a 20 22 39 37 33 22 2c 0a 20 20 22 42 44 22 3a 20 22 38 38 30 22 2c 0a 20 20 22 42 42 22 3a 20 22 2b 31 32 34 36 22 2c 0a 20 20 22 42 59 22 3a 20 22 33 37 35 22 2c 0a 20 20 22 42 45 22 3a 20 22 33 32 22 2c 0a 20 [TRUNCATED] Data Ascii: { "AF": "93", "AX": "+35818", "AL": "355", "DZ": "213", "AS": "+1684", "AD": "376", "AO": "244", "AI": "+1264", "AQ": "", "AG": "+1268", "AR": "54", "AM": "374", "AW": "297", "AU": "61", "AT": "43", "AZ": "994", "BS": "+1242", "BH": "973", "BD": "880", "BB": "+1246", "BY": "375", "BE": "32", "BZ": "501", "BJ": "229", "BM": "+1441", "BT": "975", "BO": "591", "BQ": "599", "BA": "387", "BW": "267", "BV": "", "BR": "55", "IO": "246", "VG": "+1284", "BN": "673", "BG": "359", "BF": "226", "BI": "257", "KH": "855", "CM": "237", "CA": "1", "CV": "238", "KY": "+1345", "CF": "236", "TD": "235", "CL": "56", "CN": "86", "CX": "61", "CC": "61", "CO": "57", "KM": "269", "CK": "682", "CR": "506", "HR": "385", "CU": "53", "CW": "599", "CY": "357", "CZ": "420", "CD": "243", "DK": "45", "DJ": "253", "DM": "+1767", "DO": "+1809 and 1829", "TL": "670", "EC":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:25.180577993 CEST	336	OUT	GET /assets/layui-v2.6.8/layui/layui.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:26.261209965 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "0d1cb65dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 120092 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 79 77 db 46 b2 28 fe 7f 3e 05 e4 e4 5d 80 91 48 91 b2 e5 45 b2 ad e3 d8 ce 8d ef 2f 76 72 63 cf f6 28 25 07 22 9b 12 62 0a e0 00 a0 6c 8d ed ef fe eb aa ea a5 7a 01 48 3b b9 ef cd d3 9c 89 09 a0 f7 ae ae ae bd f6 bf dd 49 5e be 78 93 fc 58 cc 44 d9 88 79 f2 ed 7e b2 93 2d d6 e5 ac 2d aa 32 c9 da 41 f2 e1 ab 24 49 d7 8d 48 9a b6 2e 66 6d 7a 2c 9f af f3 3a 11 c9 a3 a4 1d cd ab d9 fa 4a 94 ed 9e 7c 9b 24 a5 7c f7 21 b9 aa e6 eb a5 68 8e 92 0f 9f f6 64 ad bc 5d ab df 6d 71 25 aa 75 7b 94 4c c6 7b 89 b8 96 d5 e0 7d f2 89 2a d7 b2 b2 ed 99 3a 86 bf f6 b2 68 46 d7 f2 63 7a 30 ba 3b ba 8f 03 48 74 a5 0a 47 f1 e3 93 7f fc e5 c5 6f ff f9 e3 4f df 3d f9 31 f9 f8 11 3a c3 af b9 fc 9a c5 da 84 09 b4 f2 a3 18 cd d6 75 2d 07 f2 7a 56 17 ab 56 7d 4d 92 13 ff cb a8 a9 67 e6 eb 51 bc 51 fa 5b 54 75 92 61 fb 7b b8 1e 62 d4 60 0b cd 1e ce b0 1c 2d 45 79 d1 5e 26 c3 64 b2 87 c3 af 8f e5 3f 8f 93 b1 fc 67 38 1c 38 6d 25 49 b1 48 b2 b4 28 5b 51 e7 b2 bf 6b 91 26 8f 1e c9 46 a6 d5 d9 a8 [TRUNCATED] Data Ascii: ywF(>]HE/vrc(%"blzH;I^xXDy~--2A$IH.fmz,:J\|$\|!hd]mq%u{L{}:hFcz0;HtGoO=1:u-zVV}MgQQ[Tua{b`-Ey^&d?g88m%IH([Qk&F\^W-Q['.e;r=i4iy_YQe/x"KALhp@AS`QKh<]VS"Hiy>e2YkQ`G!\r4`v"Vr/tZ.fm9zMsV[ul<$jr,{t55;M/%}?EW5cWj^+\|kl8};6?_KKq("U0Ufo[dJ4boR]eVDcW-,zvnG?}^u0z %R@9@!j`TWX2yWuxqr`]jg<pP8i/:b8jaF1&}>k\xWo`?y4exbOg=`;K^.)EHF
Oct 13, 2024 20:26:26.261243105 CEST	1236	IN	Data Raw: 8b 9e 4f 0f 96 64 2f 99 c9 7b dc 4e d4 7c 5d 05 7b ac 60 8b 0d 3f fd f9 c7 fc e6 f5 9b 27 6f 5e fc f4 2a b9 ad ae af fc ba b8 c8 db 4a 76 bc cc 5b 40 37 ce 02 9c 24 fb bf ce aa ab d5 52 b4 e2 9b 7d e7 d3 91 fc 94 e9 6f 1f 01 21 89 f9 e0 9b 7d bb Data Ascii: Od/{N\|]{`?'o^Jv[@7$R}o!}DnLIFh,k&/DzP2^@AVb9op^Ib XP$ Oxpshj%jSW*/)JgO$Y%hP;<C
Oct 13, 2024 20:26:26.261322975 CEST	1236	IN	Data Raw: 29 91 59 d4 7e 93 55 71 e4 0e b0 30 19 8f c3 a3 bf f4 80 44 0d b1 03 29 ef ee 2e 3a ee f0 75 e4 26 2d 32 24 e3 b4 1a 20 8d dd ab 74 69 4f 1e dc 7f 80 57 cc 0a ee b9 17 12 f2 72 73 8c 33 10 66 bc 2b e6 ed 65 6a 28 3a bf 27 00 40 a8 8d f4 8c e2 c7 Data Ascii: )Y~Uq0D).:u&-2$ tiOWrs3f+ej(:'@B43;B:K:fqPta/Yu;H0Yup=VRrC`.y%sr@7#"cx=YXBv(z;\=C? Ed5"`W
Oct 13, 2024 20:26:26.261354923 CEST	1236	IN	Data Raw: 23 bf 86 75 90 39 1e f7 61 dd 42 6c b3 68 fe bd b9 b3 23 31 ed 13 b4 27 fd fb 4f 64 c3 08 08 cc 79 93 2a 4e 36 34 a8 30 9b bd 7f d5 14 e2 b4 c9 4e e7 bb 21 83 32 99 78 17 7c ef ed f1 4e 14 ef 8b 12 a4 61 e9 55 31 ab ab 2b 79 54 e4 65 29 38 bf e7 Data Ascii: #u9aBlh#1'Ody*N640N!2x\|NaU1+yTe)8q;+D;`(j\&[r^W(VW?R$Q%U;my{xC~ m7;-K^!XZrfs37Bph(C0Dnvgh Uu~d}
Oct 13, 2024 20:26:26.261385918 CEST	1236	IN	Data Raw: 7d cf 8c aa be 26 8e c7 d9 84 96 fc dc 04 fc 03 37 05 38 00 3b b3 7d a4 19 78 10 33 67 50 7c 0f 4b 81 76 01 fe 8d 88 0a db 08 cf 82 83 00 55 6c 5c 88 8d 5f 4e e8 1f 98 c0 b1 9c ee 43 c3 0b ca 27 c9 74 58 7e 30 56 bf 25 13 6f ec 63 0f 9f 03 0e c0 Data Ascii: }&78;}x3gP\|KvUl\_NC'tX~0V%oc0xdlBemD2,isiITN!Au&^>^PK2GB6bKE5.y}0pSk7ZpGluW6;N=}f#kMq f>A
Oct 13, 2024 20:26:26.261421919 CEST	1236	IN	Data Raw: 63 65 ed 18 6d 38 a9 e8 68 55 20 a2 70 c0 f1 d1 ea c9 c1 84 cc 3d 11 6d 58 92 46 bd ad ea f3 d7 73 8f 6d b3 3e 51 74 de 7a e8 9c 2d 0c a1 24 d1 77 cd 6d 03 3c b3 de fd e5 0a 89 4e 53 8e a8 1d 07 e9 fc 5b 90 06 41 04 83 56 d1 9d 11 a9 68 77 84 1b Data Ascii: cem8hU p=mXFsm>Qtz-$wm<NS[AVhwTbl!JI\|,Y2WVzK5p388!i>y&S=xd!lmH97/bB5cT=6.%I]V$r>o=2e}f"fM^V`m}
Oct 13, 2024 20:26:26.261452913 CEST	1236	IN	Data Raw: a3 b1 be 00 29 f8 1f 66 71 49 2a 65 27 fe f9 e4 30 dc b4 ae 85 38 86 10 76 a3 3d 32 7b f2 34 16 2c 34 b5 29 7a bc 94 33 b5 89 d7 39 9c 17 0d e4 72 d1 8d ad fb 42 19 e4 1e 54 81 7f 88 5e 58 61 3d 3b f4 5b 8a df 22 bf ed ee 36 f4 5b 7e cd 15 2c 67 Data Ascii: )fqI*e'08v=2{4,4)z39rBT^Xa=;["6[~,gVo{7Nt &/Z rHl.B,}.#nczns4sG-j#=GkJGoYH0$-6uO^u] 7\|YWEYEr'&
Oct 13, 2024 20:26:26.261485100 CEST	108	IN	Data Raw: bc 00 1f 9e af db 56 ce 99 06 40 0f 1d 5b 74 de 96 38 a3 7b f7 ef 0a 98 d1 e1 f9 83 5c 5e ef 54 27 d2 45 14 fe ec 0e 74 9a 26 f9 76 b8 76 d9 d3 87 f3 e2 da 1d dc 79 f5 3e 71 86 e9 3e 0d dd d5 d3 c4 2c 30 4c 21 85 8b 91 40 ab e5 35 1c 76 f3 ee 08 Data Ascii: V@[t8{\^T'Et&vvy>q>,0L!@5ve_#\IKjvzb3
Oct 13, 2024 20:26:26.261512995 CEST	1236	IN	Data Raw: c7 f9 f6 28 8a 75 11 2c 4a 08 39 82 cd 3d d3 07 fa 2b 54 68 06 85 66 0b 37 a8 1d ed 89 bb a3 51 72 c3 4b bc c7 a2 03 3e dc 97 7b 65 36 df df f6 a8 44 f6 f7 f5 d5 ca 57 87 b0 80 c7 68 ee e6 5b 08 b4 81 98 96 24 51 6d 20 a8 4d 74 8e 31 b0 ae aa 45 Data Ascii: (u,J9=+Thf7QrK>{e6DWh[$Qm Mt1E`r.LOO%R\|'u)3%tH2Mrd8a{XZ;n(\|:iu6*5vQUfP~gouYzyPM&2PC,\|.Hk/V_
Oct 13, 2024 20:26:26.261545897 CEST	1236	IN	Data Raw: 2c 96 c0 d4 18 fe cb b7 20 47 e2 e8 b8 06 a6 f1 48 12 09 fa 05 ad c6 11 ad de f0 e5 cb e1 dc 66 9a 47 26 e0 c8 89 75 5d 34 2f e4 4e fc 95 3e ec 98 9b eb 0a f2 b8 a4 93 07 e3 f1 70 32 b4 77 e2 55 2e ef bf f4 60 fc e0 c1 70 72 30 bc 6d 3f 48 9a e2 Data Ascii: , GHfG&u]4/N>p2wU.`pr0m?HhAzGq',fKhV4r\+I}"%K <yyotzXxz0?ngj&^xRxyPz#b{^
Oct 13, 2024 20:26:26.261666059 CEST	1236	IN	Data Raw: 8e 34 ef b2 38 3f 49 ee 74 7c 01 b3 1d 32 56 f8 2a fe 99 fa d8 d0 83 5c c5 c9 de 9d b4 bb 89 6d ea df 1e df ef 6a 41 7e 3d f0 bc 6c e0 0f ec 67 62 16 5d 9f 22 86 a7 a7 a7 a8 dd 3a f6 f1 84 81 49 f3 13 62 eb 06 46 02 2e 84 f2 a7 dd 24 65 09 54 d3 Data Ascii: 48?It\|2V*\mjA~=lgb]":IbF.$eTCo?zEHl7ia]!gqyXw`p>92S`o}'c%Nyu>tQN9H\|p4!Zl/"'VmNsliGB:4ARt
Oct 13, 2024 20:26:26.731012106 CEST	390	OUT	GET /assets/layui-v2.6.8/layui/css/modules/laydate/default/laydate.css?v=5.3.1 HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.043740988 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "8e6fe265dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 2345 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 c6 65 76 3d cb da 7c bb c9 db ed eb c5 28 c1 07 eb 62 9b fe c5 c7 dd bf d3 6f 75 3f d9 2e 8b a6 4d 7f 71 92 a6 93 ea dd 76 53 fc a0 58 5e 3c a2 df eb 59 5e 6f d3 47 87 c9 2f 49 92 79 bb 28 d3 1f a7 37 d6 c5 b4 69 cc ab fc d6 ac 68 56 f4 f7 a3 74 59 2d f3 43 fa 60 55 35 45 5b 54 cb 47 69 36 69 aa 72 dd f2 a7 57 c5 ac 9d 3f 4a 77 1f 1e 3c 5c 09 cc 10 8d f4 5b 0c 6d 91 d5 17 05 bd ba 83 77 56 d9 6c c6 d8 d0 5f fd 17 d0 3c de d7 0f b6 8b e5 2c 7f f7 28 fd 54 1f 7c 68 20 df 5f bd 03 3c 0c 97 87 58 67 b3 62 dd 3c 4a f7 80 56 9a 9e 57 cb 16 54 c8 09 d7 7d f9 68 fb 2a 9f bc 2d da ed 6c 59 2c 32 f4 b6 3d 5b d7 fc 0b 61 36 de 6b d0 66 d3 77 fd f7 cf 8b b2 dc 5e 54 33 ea 64 52 b5 73 34 ba [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"ev=\|(bou?.MqvSX^<Y^oG/Iy(7ihVtY-C`U5E[TGi6irW?Jw<\[mwVl_<,(T\|h _<Xgb<JVWT}h-lY,2=[a6kfw^T3dRs4lA+grRl/b$R=NiMY3yFb`m-ea{kY@Pv~wSiWZf[;t&zA;#Mwwpv&( 24-d0#9]\g%X2-0;}(12f^]eVZr{[8]lX_A>o:`_m D[~>nWg/C^YMoU{7xohH!zS//CZ{;sjj.}>?$xyMYY\jj%NQ>N>AUU7HMyso;WS}5(yh9:US~ZT4/bI'Ol/@'-Vo*mtgA,HpMe\Xl.dVn7yO?FnEb6A]f
Oct 13, 2024 20:26:27.214874983 CEST	385	OUT	GET /assets/images/logo.jpg HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.534811974 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "4115d865dbfeda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 6328 Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 60 00 60 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 80 00 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 04 06 01 02 05 09 03 ff c4 00 40 10 00 01 02 04 04 04 04 02 06 09 02 07 00 00 00 00 01 02 03 00 04 05 11 06 07 12 21 31 41 51 61 08 13 71 82 14 a1 22 24 32 42 43 72 15 17 52 62 81 91 a2 c1 e1 16 c3 23 25 34 35 53 92 d1 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 07 01 03 05 04 08 02 ff c4 00 3b 11 00 01 02 04 02 06 08 04 06 02 02 03 00 00 00 00 01 00 02 03 04 05 11 06 21 31 41 51 71 [TRUNCATED] Data Ascii: JFIF``CC@!1AQaq"$2BCrRb#%45S;!1AQq"Ra#B2br3?H"A<{}z5q1PHBL_EG3l,{!xWL]w[HP+}+[8J'Hcp_I^vUKF6+9u(aiWS-czS4>T<b:/ZBvmEssQ!,Hq;K'e)8n&O"n@RM3Vm<9?(LPCocX$29%'O3huvFu}4X`9HtaN.~hy>`/G\|5ACpO{Dg=;1X[`>#QJ#H"AEVShTbuI9TyiJ:;F"L:Z&faJBtxks$U;6PRPt<ZO7jPd@##o\I2{vR*Q7$f' ,nIqXKDKDKE
Oct 13, 2024 20:26:27.576646090 CEST	344	OUT	GET /styles.e2974b719a0acf9b.css HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.887507915 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "803a3365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 24726 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 8f e3 ba 92 20 f8 7d 7e 85 bb 2f 0e 50 79 8f ad b6 d3 f9 b4 d1 8d 9e 99 4f 0d cc 62 80 e9 fe b2 b8 38 1f 64 5b ce 54 97 6c 79 65 b9 2a eb 18 75 7f fb f2 29 91 e2 2b f8 90 b3 76 d1 e7 e2 66 d9 b2 18 2f 06 23 82 64 30 98 6d 77 5f 67 f5 b7 a2 a9 f2 1f b3 6d 7d 6c f3 f2 58 34 53 f2 f8 ad aa 37 79 d5 fd fa bd c9 4f a7 a2 b9 9e ea f2 d8 16 cd ac f8 56 1c db f3 ea 58 1f 8b 75 5b 9f 56 f3 75 55 ec 5b f4 cf 7b 51 be bd b7 ab c5 7c fe db fa 7b b9 6b df c9 c7 9f 7a 54 08 dc b9 6c cb fa b8 da 97 1f c5 6e fd e7 ac 3c ee 8a 0f dc 64 6e 68 b2 2a 0e a7 f6 c7 75 57 9e 4f e8 39 21 e0 a7 8d 60 fe e2 be 2a 3e d6 1d ba 7c 73 ae ab 4b 5b 58 30 9e f2 63 71 55 1b 0c 04 90 5f da 7a bd a9 3f 66 e7 f2 cf f2 f8 b6 da d4 cd 0e fd 8a 9e 48 a0 d7 12 19 87 fc 63 d6 cb 86 7c 15 c4 26 93 b1 c9 b7 5f 77 4d 7d d2 90 42 e5 be a9 db b6 3e f4 1d d0 10 40 73 19 bd 8e ea d9 f7 62 f3 b5 6c 67 6d 7e 9a bd a3 46 15 6e 88 04 5d d5 cd aa 6d f2 e3 f9 94 37 e8 ed 35 f9 4c 51 d7 a7 7c 5b b6 3f 26 d9 c3 79 b2 [TRUNCATED] Data Ascii: k }~/PyOb8d[Tlyeu)+vf/#d0mw_gm}lX4S7yOVXu[VuU[{Q\|{kzTln<dnhuWO9!`>\|sK[X0cqU_z?fHc\|&_wM}B>@sblgm~Fn]m75LQ\|[?&yllSYqL?5{m5}8;6os;mDdvy2nm/)_[Oo(T5Xlb7`5uZV<g+@}}9Aqm<}HcmTpWm3;n m[&z/wmq<O?OoEM{UM~p\4]_n$V4_q6<wNMHHn&3};lCuu)_,ES?1<{wsz]d~-W^xH~/{4vkfdOa~+^oTSSPPV?VX#MG(?sa\g4kv$F$,65M]~n]1MW/r>?y;rlA#(Gv7LZ3d~1NY
Oct 13, 2024 20:26:27.927285910 CEST	374	OUT	GET /favicon.ico HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:28.238468885 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "3a935f65dbfeda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:28 GMT Content-Length: 15086 Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 a4 58 0f ee 9b 47 3c ee 98 41 76 ed 96 3d ac ed 94 3b d5 ed 93 39 ef ed 93 37 fd ed 91 34 ff ed 91 34 ff ed 93 38 fd ed 94 3a f0 ed 95 3c d6 ee 97 40 af ee 9a 45 79 ef a0 4f 3e f1 ad 67 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: 00 %6 % h6(0` $XG<Av=;97448:<@EyO>gdG+>y954332233222347<D}S.kE1;63333333333333332248AS5I<633333333333333333333238D^A?83333333333333333333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:25.180780888 CEST	329	OUT	GET /assets/download/filename.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:26.261579990 CEST	499	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "9f216565dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 191 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 ce d7 cb 69 5b 54 cb 74 eb 4e fa 8b 93 34 bd 2a 96 b3 ea ea 7b 1f 9f 17 65 be cc 16 f9 c7 df 4f 3f 4b 3f fe af fe fe bf ee bf f8 e3 ff 92 ff ec ef fa 53 ff cb bf e7 1f fc c1 38 7f 97 7f 7c 98 fc 92 3b 5b 77 0e 93 ff 07 93 76 f2 e0 41 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"i[TtN4{eO?K?S8\|;[wvA
Oct 13, 2024 20:26:26.284481049 CEST	499	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "9f216565dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 191 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 ce d7 cb 69 5b 54 cb 74 eb 4e fa 8b 93 34 bd 2a 96 b3 ea ea 7b 1f 9f 17 65 be cc 16 f9 c7 df 4f 3f 4b 3f fe af fe fe bf ee bf f8 e3 ff 92 ff ec ef fa 53 ff cb bf e7 1f fc c1 38 7f 97 7f 7c 98 fc 92 3b 5b 77 0e 93 ff 07 93 76 f2 e0 41 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"i[TtN4{eO?K?S8\|;[wvA
Oct 13, 2024 20:26:26.748867989 CEST	367	OUT	GET /assets/layui-v2.6.8/layui/css/modules/code.css?v=2 HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.059948921 CEST	972	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "8e6fe265dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 678 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 e6 ed a2 4c 7f bc cc ae d7 c5 b4 69 b6 9b b7 c5 72 5a cd 72 fa 3d fd c5 49 9a ce 8a 66 45 5f 3e 4a 97 d5 32 3f a4 0f 56 55 53 b4 45 b5 7c 94 66 93 a6 2a d7 2d 7f 7a 55 cc da f9 a3 74 f7 e1 c1 c3 d5 bb c3 e4 97 24 c9 98 de 5a 17 db 80 b5 3d bf 37 0a fe be 2c f2 2b 86 ee 80 d5 79 99 b5 c5 25 03 3b af 96 ed 76 53 fc 20 27 80 7b 11 70 f6 75 8b dc a4 ac a6 6f f1 ea 22 ab 2f 0a 02 b7 bb b3 7a 97 ee e0 93 55 36 9b 15 cb 8b 47 f2 d7 a4 aa 67 79 4d df d3 d7 84 7d 31 4b 7f 3c cf b9 53 f9 66 bb cc cf db 6d 1d cd a7 e8 9b be c9 a6 6f 2f ea 6a bd 9c 51 f7 65 45 6f ff f8 79 86 ff f0 a5 f9 e4 de bd 7b f8 93 51 3f cf 16 45 49 58 9d 54 eb ba c8 eb f4 45 7e d5 1b c3 fc 1e 8f c0 61 97 02 65 80 98 [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"LirZr=IfE_>J2?VUSE\|f-zUt$Z=7,+y%;vS '{puo"/zU6GgyM}1K<Sfmo/jQeEoy{Q?EIXTE~ae}eI?~gtgO^-m"\|{0y?e^un[+dy(R{:xO=ee^I EV;m ii28&yQ2mYAP:7D^e[U#1)K"IsUto?@ad*3B1Xxi,_T>dyY4(4^Z,VUfw'y~t}lB.\|2rD0`$`N3
Oct 13, 2024 20:27:12.068116903 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:25.181247950 CEST	361	OUT	GET /runtime.d0a0d8313f8d1e00.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive Origin: http://telegiraum.club User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:26.261178017 CEST	1079	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "6356365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 772 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 b6 ee 7c 76 f4 8b 3f 5a 37 79 da b4 75 31 6d 3f 3a bc cc ea 34 1f 15 9f fd e2 5f 32 fa fd e9 9f c3 f3 f5 72 da 16 d5 32 5d 6e e5 77 7e 31 be ad 3e fb fd bf 97 7f ff b0 38 df ba ac 8a 59 ba f3 bb 7e f6 59 75 a7 ce db 75 bd 4c ab 71 fe 6e 55 d5 6d c3 70 6a 6e f9 d9 2f d6 cf 1e fd e2 5f f2 4b 0e b5 61 41 5f 8c a7 59 59 6e d5 e6 95 51 3d 72 bf 2f ef b8 3f 7e c9 72 bc f8 ac 18 e5 9f 7d ef fb a3 e5 f8 cb cf b6 2a 6a ba 1e 95 c0 9d b0 f8 5d 6b c1 ab f9 6c f7 ee ce e1 79 55 6f 65 9f ed 1c 66 8f f3 71 99 2f 2f da f9 61 f6 c9 27 77 7e 31 3e a7 56 df e3 37 bf ff 59 fe bd ec fb a3 e9 67 bf eb ce e8 9c 1a 9f 3f ae 4d e3 73 6a bc f5 bb ee fe c2 f2 67 7e a6 39 fa ac bc f3 0b 7f e1 97 93 9f [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"\|v?Z7yu1m?:4_2r2]nw~1>8Y~YuuLqnUmpjn/_KaA_YYnQ=r/?~r}j]klyUoefq//a'w~1>V7Yg?Msjg~9m~lQwe^_o?;7V{fU\|\|{{{_t$iq;Tz~3l/%JF#>s;}<$wo$}xH?QEU>gWuZMG(8v~!~?;3j}~LQ;^6jFV.DlT\|kFoXz<?iL;V3:';gg_WJ"f QY{\|(B_\|QXVw~U>Ye'm6.63?cB4X?3cH>%w
Oct 13, 2024 20:26:26.264661074 CEST	1079	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "6356365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:25 GMT Content-Length: 772 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 b6 ee 7c 76 f4 8b 3f 5a 37 79 da b4 75 31 6d 3f 3a bc cc ea 34 1f 15 9f fd e2 5f 32 fa fd e9 9f c3 f3 f5 72 da 16 d5 32 5d 6e e5 77 7e 31 be ad 3e fb fd bf 97 7f ff b0 38 df ba ac 8a 59 ba f3 bb 7e f6 59 75 a7 ce db 75 bd 4c ab 71 fe 6e 55 d5 6d c3 70 6a 6e f9 d9 2f d6 cf 1e fd e2 5f f2 4b 0e b5 61 41 5f 8c a7 59 59 6e d5 e6 95 51 3d 72 bf 2f ef b8 3f 7e c9 72 bc f8 ac 18 e5 9f 7d ef fb a3 e5 f8 cb cf b6 2a 6a ba 1e 95 c0 9d b0 f8 5d 6b c1 ab f9 6c f7 ee ce e1 79 55 6f 65 9f ed 1c 66 8f f3 71 99 2f 2f da f9 61 f6 c9 27 77 7e 31 3e a7 56 df e3 37 bf ff 59 fe bd ec fb a3 e9 67 bf eb ce e8 9c 1a 9f 3f ae 4d e3 73 6a bc f5 bb ee fe c2 f2 67 7e a6 39 fa ac bc f3 0b 7f e1 97 93 9f [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"\|v?Z7yu1m?:4_2r2]nw~1>8Y~YuuLqnUmpjn/_KaA_YYnQ=r/?~r}j]klyUoefq//a'w~1>V7Yg?Msjg~9m~lQwe^_o?;7V{fU\|\|{{{_t$iq;Tz~3l/%JF#>s;}<$wo$}xH?QEU>gWuZMG(8v~!~?;3j}~LQ;^6jFV.DlT\|kFoXz<?iL;V3:';gg_WJ"f QY{\|(B_\|QXVw~U>Ye'm6.63?cB4X?3cH>%w
Oct 13, 2024 20:27:11.271114111 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:26.450206041 CEST	297	OUT	GET /polyfills.9225875df2b05e64.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.345372915 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "803a3365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 13209 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc 7d 09 73 db b8 d2 e0 5f 91 58 29 3d b2 8c 68 ed f7 be af 6a 57 0a 46 e5 43 71 9c f1 35 b6 92 49 ac a7 d5 50 14 24 31 a6 48 85 87 6d 59 e6 7f df 6e 5c 04 0f 27 79 6f bf 3d a6 6a 22 e2 6e 34 fa 42 a3 01 5b 59 c2 5a 49 1a fb 5e 6a f5 ed 84 05 8b ee 23 9b 6d 5c ef fe 78 95 85 f7 ee fc 61 ba 89 e2 d4 9d 66 3e fd 61 e9 cb cb 78 e2 74 37 59 b2 b2 c7 e3 ff f8 fb ff 98 90 dd 7f fe a3 67 9f 30 32 67 64 c4 1c fa db ce 8b c2 24 6d 6d 18 b5 b2 70 ce 16 7e c8 e6 56 9b a6 db 0d 8b 16 ad 65 10 cd dc 60 b4 f2 93 4e a7 f8 26 87 cd b5 1f fd 70 1e 3d 76 3a e2 97 7c 68 ae 85 00 77 3a 4d 25 7f 46 f1 3d 8b 4f f9 38 b7 5e b4 61 9d 0e 56 6e f9 00 a1 1b 7a 3f a8 42 8e 19 dd b0 97 97 d7 e7 a0 e0 7f 79 39 84 7a 1f 18 59 33 ba c8 42 2f f5 a3 d0 7e 43 ba dd 6e c8 9c 9d bf b0 d7 ac 9b c6 6e 98 04 6e 0a 19 02 3b 1f a9 99 0b d5 a1 6e ff 0d fd 38 de 9f c0 27 fc 1e 4c f2 80 a5 ad 5b 1a 41 29 e6 be e9 c6 ee 23 7c 38 fd 45 14 db 58 f6 91 1e f4 3f be 7b d3 0d 58 b8 4c 57 fd 8f 7b 7b ce ed 1e 0d d9 f8 e3 [TRUNCATED] Data Ascii: }s_X)=hjWFCq5IP$1HmYn\'yo=j"n4B[YZI^j#m\xaf>axt7Yg02gd$mmp~Ve`N&p=v:\|hw:M%F=O8^aVnz?By9zY3B/~Cnnn;n8'L[A)#\|8EX?{XLW{{oQbfqV$2gQ=t3xMNa-= mAx`?):E E,NY?]c+daC}S4o"gZA=,gzYnurr{n(ZzVzqBH$\|N]\WsQd13>ya]2<o:i]`g#{jdDwXe~d}y3Ys8.` oAwgrm+9w-MhNSjsd{$s8R%%KAt7faJS",.~pV98,You:QHrYx\Pbr2^[q?\|dn3MZs2<]i-D9/xc?MYgx5=-E'o:DvAXk)kYdnn\|1]
Oct 13, 2024 20:26:27.345405102 CEST	224	IN	Data Raw: c7 15 f4 f1 2c 9b 41 a9 24 89 d6 d9 a2 b5 8d b2 d6 3a 43 98 20 af 05 55 48 6b 1e b5 92 08 c6 05 3a 65 3c 1b fb 97 ad bb 8e a5 d1 bd 04 02 c2 f5 06 2c 23 2d a5 f4 bc eb 65 31 ae 10 17 85 fd b4 2b d6 ab ef 00 e9 a8 6f 49 83 a9 d9 89 6c 65 6b be f9 Data Ascii: ,A$:C UHk:e<,#-e1+oIlek*)K} uW :tr8{pl%EOYP>QrA^8fCb\;ys)c8\U-<,i1#K O
Oct 13, 2024 20:26:27.345458031 CEST	1236	IN	Data Raw: 0e 4a 92 48 c9 ef c8 64 45 80 27 2f d7 e5 ab 27 7a 11 0b 17 f5 39 86 4a cd 1a b0 a8 7a ef 47 34 d2 70 cb cc 30 0b 82 1c 3a bb c7 fe 11 6f 69 33 9b dd 6e 98 d7 8a d9 f7 cc 8f d9 bc 5d c8 a8 ba 6c e8 8a de b8 68 70 f2 c7 d8 dd 08 09 85 1a ab 2e 24 Data Ascii: JHdE'/'z9JzG4p0:oi3n]lhp.$>X)(+6&Z`K5^n[./5(AC T g}&8v4^>DL{"r`=~R@=Ka=\|ihryZ8r_;@B
Oct 13, 2024 20:26:27.345511913 CEST	1236	IN	Data Raw: 25 3d 4c 89 dc 97 cd a4 9c be 4e a4 95 01 8a 85 d6 03 94 88 71 d9 4c 68 e9 eb 24 54 0c e0 08 77 10 28 d2 8a 47 4b e8 c7 81 99 90 7a ce 2e ab cc 42 1d a3 15 e0 f4 d0 50 9d f2 0e f3 c2 47 23 15 7e 69 04 43 d5 0d 6a 39 a6 8e b2 1b f4 e0 6b 1a 4e 5a Data Ascii: %=LNqLh$Tw(GKz.BPG#~iCj9kNZ"4.iWuY2L%`=w6vg^W@\|%bt)oC*\\uQf3K^+h7D@0ORm3aJb'Fv>Q8n~Oe7U
Oct 13, 2024 20:26:27.345546007 CEST	1236	IN	Data Raw: c4 40 80 5a 91 3c e1 8a 4d c5 05 c8 4e 44 d1 29 4b 8d 90 81 13 96 78 b1 bf 49 25 8a 74 07 fc b4 80 a9 bc c3 38 76 b7 b7 81 ef 89 1c 35 9f 63 34 11 64 e7 78 f6 8f a1 0b c7 c5 6a ca 92 85 1f c0 2e cd 40 9a ec c2 4d 53 17 d0 c9 0f c8 46 91 0c 0e 92 Data Ascii: @Z<MND)KxI%t8v5c4dxj.@MSFm17MA+:R8LL'<2Os`nFDP-CE%Ba1gT+AFJdcrPY}F3DHrsNj~2Yil=JJt}g0!k
Oct 13, 2024 20:26:27.345580101 CEST	672	IN	Data Raw: 0d 01 8f 39 a6 e3 ab 37 12 13 2a 7a 23 1e d9 01 f7 15 ae b4 ac 11 8e 6c 60 1b 23 80 15 94 11 b6 67 75 ad 3d cf 41 24 19 65 24 03 f9 62 d6 cd 72 dc 3d f5 7e 08 72 9e 3b b9 1d 3b 05 0a 43 c7 d2 20 82 bd 83 8a 2b ac 0a f9 18 f5 0a ce 06 58 92 22 5f Data Ascii: 97z#l`#gu=A$e$br=~r;;C +X"_&kVQML B7a:105+.b-*ZPPg)!PT0J1$MZN&34-OK=\du''n/1O%P2ZmP!YSM S
Oct 13, 2024 20:26:27.345614910 CEST	1236	IN	Data Raw: 20 0a 60 ff 98 18 96 63 60 00 96 17 3c 7f 84 83 48 e6 e0 b4 80 04 55 14 9f 9a c5 45 f6 d0 c8 4e e5 f4 11 f3 d2 a7 84 33 e5 9e 7c a0 d2 0b 4c f0 9d 04 24 9e 31 21 4f 82 20 f9 0d 93 c2 59 26 f1 f1 59 56 fc 5e 2b b9 95 fd 7d 11 7e b3 0f c0 46 e4 6b Data Ascii: `c`<HUEN3\|L$1!O Y&YV^+}~FkII4X.3Wl5rIp%QMH)}WcQR778'O#XWi-GW-?E=5k."GZ}nc=`cIb
Oct 13, 2024 20:26:27.345649004 CEST	1236	IN	Data Raw: f6 c6 41 52 d3 2f 49 98 fe 32 34 78 bf 70 46 01 9c 08 4d 78 0c 94 89 f0 f5 de 0b e5 a3 d2 e4 b1 d0 35 66 34 14 9f 10 37 c8 13 1d b1 a6 c5 cd af 4c cf 6d 9c 1e b7 a5 5d 8c 19 56 db 07 9c 8c 0b 93 e9 af d0 86 7c 2e 26 f9 ab 33 7b 04 e1 07 bb 63 3d Data Ascii: AR/I24xpFMx5f47Lm]V\|.&3{c=3&++/viT}`pE/&T?_4,Z9i{2^UOXdP3[>*wX~2^OqK('VQY#[`olwu&x}wAE~
Oct 13, 2024 20:26:27.345681906 CEST	448	IN	Data Raw: b1 9e 8f 5c a7 b6 3e e8 36 96 d0 8c 57 9c db 1f 75 dc d1 31 b0 ee f1 bb 47 e5 ff 3b 16 6f 94 3e 8e 8f d1 ff 0e c0 3c 2a d7 df 31 3e e5 63 80 85 07 2d b8 35 7f 2c b8 3e c1 3d 8e 51 6c 0c 2a 5f 50 e1 01 31 39 3f c8 30 ea aa 25 78 10 98 53 cd 88 31 Data Ascii: \>6Wu1G;o><1>c-5,>=Ql_P19?0%xS1YR #Fd+q/+.Hm;uOYItA&VNy2\|>L[<C &D?X?SR;1}~j,%mGW@=EMC7M
Oct 13, 2024 20:26:27.345717907 CEST	1236	IN	Data Raw: 34 a6 f7 c1 6a ab 62 ea 86 55 51 b5 85 26 88 29 f2 a4 96 47 84 1c ab ae d1 7b 27 a3 10 52 3a ab 1d 54 91 2c a5 1f d9 38 48 27 fd 0c 75 fe 05 a3 59 8a 80 93 0b 9c 0f 24 83 74 cf dd b3 bf 0c be c0 aa f6 80 d8 0b b1 4d 03 06 a8 83 46 3a 87 a3 09 39 Data Ascii: 4jbUQ&)G{'R:T,8H'uY$tMF:9(OgGT:s@SEeDo~PX2zX\((>[dGCo>Y\m~d&M1HB2U0&2Tr`,l[OBgCf5`BD+Y{W
Oct 13, 2024 20:26:27.350604057 CEST	1236	IN	Data Raw: 84 8c cd e5 77 f4 cc 1f 98 8b b3 4d 3a 63 40 37 95 3c d8 28 40 97 21 76 c9 81 9e 90 18 bf 67 41 16 43 4d 71 ad 96 58 8b c8 cb 12 c4 b9 98 17 00 e4 3f e3 f4 81 d3 a2 20 28 70 2f ea 4f c8 2d ef 23 ca f0 36 1d c1 a8 6d 3f 59 71 bc b9 71 0a c5 91 1a Data Ascii: wM:c@7<(@!vgACMqX? (p/O-#6m?YqqNd<ZB8;xZiH,'-_12BYXQUc$<!,N`M5yA`'8(2>%KGbt7m+y8{@\*Y>/'xiH%^+
Oct 13, 2024 20:26:27.704143047 CEST	290	OUT	GET /assets/images/logo.jpg HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:28.020507097 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "4115d865dbfeda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 6328 Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 60 00 60 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 80 00 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 04 06 01 02 05 09 03 ff c4 00 40 10 00 01 02 04 04 04 04 02 06 09 02 07 00 00 00 00 01 02 03 00 04 05 11 06 07 12 21 31 41 51 61 08 13 71 82 14 a1 22 24 32 42 43 72 15 17 52 62 81 91 a2 c1 e1 16 c3 23 25 34 35 53 92 d1 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 07 01 03 05 04 08 02 ff c4 00 3b 11 00 01 02 04 02 06 08 04 06 02 02 03 00 00 00 00 01 00 02 03 04 05 11 06 21 31 41 51 71 [TRUNCATED] Data Ascii: JFIF``CC@!1AQaq"$2BCrRb#%45S;!1AQq"Ra#B2br3?H"A<{}z5q1PHBL_EG3l,{!xWL]w[HP+}+[8J'Hcp_I^vUKF6+9u(aiWS-czS4>T<b:/ZBvmEssQ!,Hq;K'e)8n&O"n@RM3Vm<9?(LPCocX$29%'O3huvFu}4X`9HtaN.~hy>`/G\|5ACpO{Dg=;1X[`>#QJ#H"AEVShTbuI9TyiJ:;F"L:Z&faJBtxks$U;6PRPt<ZO7jPd@##o\I2{vR*Q7$f' ,nIqXKDKDKE
Oct 13, 2024 20:26:29.284609079 CEST	279	OUT	GET /favicon.ico HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:29.593585968 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "3a935f65dbfeda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:29 GMT Content-Length: 15086 Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 a4 58 0f ee 9b 47 3c ee 98 41 76 ed 96 3d ac ed 94 3b d5 ed 93 39 ef ed 93 37 fd ed 91 34 ff ed 91 34 ff ed 93 38 fd ed 94 3a f0 ed 95 3c d6 ee 97 40 af ee 9a 45 79 ef a0 4f 3e f1 ad 67 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: 00 %6 % h6(0` $XG<Av=;97448:<@EyO>gdG+>y954332233222347<D}S.kE1;63333333333333332248AS5I<633333333333333333333238D^A?83333333333333333333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:26.450326920 CEST	295	OUT	GET /runtime.d0a0d8313f8d1e00.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.342767954 CEST	1079	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "6356365dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 772 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 b6 ee 7c 76 f4 8b 3f 5a 37 79 da b4 75 31 6d 3f 3a bc cc ea 34 1f 15 9f fd e2 5f 32 fa fd e9 9f c3 f3 f5 72 da 16 d5 32 5d 6e e5 77 7e 31 be ad 3e fb fd bf 97 7f ff b0 38 df ba ac 8a 59 ba f3 bb 7e f6 59 75 a7 ce db 75 bd 4c ab 71 fe 6e 55 d5 6d c3 70 6a 6e f9 d9 2f d6 cf 1e fd e2 5f f2 4b 0e b5 61 41 5f 8c a7 59 59 6e d5 e6 95 51 3d 72 bf 2f ef b8 3f 7e c9 72 bc f8 ac 18 e5 9f 7d ef fb a3 e5 f8 cb cf b6 2a 6a ba 1e 95 c0 9d b0 f8 5d 6b c1 ab f9 6c f7 ee ce e1 79 55 6f 65 9f ed 1c 66 8f f3 71 99 2f 2f da f9 61 f6 c9 27 77 7e 31 3e a7 56 df e3 37 bf ff 59 fe bd ec fb a3 e9 67 bf eb ce e8 9c 1a 9f 3f ae 4d e3 73 6a bc f5 bb ee fe c2 f2 67 7e a6 39 fa ac bc f3 0b 7f e1 97 93 9f [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"\|v?Z7yu1m?:4_2r2]nw~1>8Y~YuuLqnUmpjn/_KaA_YYnQ=r/?~r}j]klyUoefq//a'w~1>V7Yg?Msjg~9m~lQwe^_o?;7V{fU\|\|{{{_t$iq;Tz~3l/%JF#>s;}<$wo$}xH?QEU>gWuZMG(8v~!~?;3j}~LQ;^6jFV.DlT\|kFoXz<?iL;V3:';gg_WJ"f QY{\|(B_\|QXVw~U>Ye'm6.63?cB4X?3cH>%w
Oct 13, 2024 20:27:12.349369049 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:26.450817108 CEST	295	OUT	GET /assets/download/filename.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.355312109 CEST	499	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "9f216565dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 191 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 b6 ce d7 cb 69 5b 54 cb 74 eb 4e fa 8b 93 34 bd 2a 96 b3 ea ea 7b 1f 9f 17 65 be cc 16 f9 c7 df 4f 3f 4b 3f fe af fe fe bf ee bf f8 e3 ff 92 ff ec ef fa 53 ff cb bf e7 1f fc c1 38 7f 97 7f 7c 98 fc 92 3b 5b 77 0e 93 ff 07 93 76 f2 e0 41 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"i[TtN4{eO?K?S8\|;[wvA
Oct 13, 2024 20:27:12.367106915 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:26.471371889 CEST	292	OUT	GET /main.7b574a882822896f.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.371553898 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:05:12 GMT Accept-Ranges: bytes ETag: "084bd7dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 216842 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac bd 8b 7f d3 c6 b2 38 fe af 38 be 7c 5c e9 66 e3 da e6 51 6a 47 f1 a5 10 38 e9 81 40 09 7d 50 d7 37 28 f6 26 51 91 a5 54 92 03 69 ec f3 b7 ff 66 66 5f b3 b2 1c e8 ef 7b 3f e7 94 c8 ab d5 3e 67 67 e7 3d 41 29 d3 f3 ee 27 79 76 15 cf 3e 3e bd 5c 66 1f e3 f9 f5 e9 55 5e 54 f1 e9 32 89 ee 7c bb 5a 4d a6 61 f7 6a 59 5e 06 93 49 ff bb ef a7 e2 f6 bb 07 0f 86 c1 b5 14 b9 14 bf 84 d1 c1 6d 7b 59 ca 56 59 15 c9 ac 6a 8f ce 97 d9 ac 4a f2 ac f5 2e a8 c2 db 42 56 cb 22 6b 9b c2 76 14 55 37 57 32 3f 6f 55 eb 54 56 ad 4f d1 4e 7f 34 cb b3 b2 6a bd 8c 6e df 14 f9 22 29 e5 f0 3a 4f e6 ad 9e 28 a1 02 b4 fc 4c 5e 15 72 16 57 72 7e 72 93 cd 2e 8b 3c cb 97 e5 61 51 e4 c5 bf e2 6c 9e 26 d9 05 76 94 9c e3 bf aa a9 2c ca e4 a7 16 55 a1 c6 f3 54 76 3f c5 45 16 b4 9f 1d be 79 7b f8 f4 c9 bb c3 67 3b ad b7 9f 7f 3c 69 7d 8a cb 16 f6 53 e5 d8 55 6b 6e fb 6a 95 ae b3 96 c4 a6 5a 97 ba bb d6 99 bc 8c af 13 28 39 bb 69 cd f2 b9 6c c5 d5 b0 f5 47 d6 de cd ba 65 05 6b 18 ae 65 0a 8d 7d ea 74 4c ef [TRUNCATED] Data Ascii: 88\|\fQjG8@}P7(&QTiff_{?>gg=A)'yv>>\fU^T2\|ZMajY^Im{YVYjJ.BV"kvU7W2?oUTVON4jn"):O(L^rWr~r.<aQl&v,UTv?Ey{g;<i}SUknjZ(9ilGeke}tLi~aLUB7nA?[7Gj-.z->n3D%/ }ONOdsQW#+p[IQ7UPEU3Y0(2.C7Xe@e2?S1R3z 8M2)Cv,en3=f/eV.Y\a?2f_m$uw+U~RWAv?V?2jK#@~TUW9>zMkv(Poa0G4.udT^]W\|E%6jq&#bp~ bFxXB5g(Ea"xB[f,[,b[E~-P@GZexK(Fy('>\|!=\|GUqsAysvm\|xWAa(Bw5t<(CyqTQ`qh4;_AuP>3A
Oct 13, 2024 20:26:27.371751070 CEST	224	IN	Data Raw: 14 77 a1 31 a8 16 5c 05 33 33 9c 70 98 a9 9b 66 16 ae 69 58 99 46 23 88 cf 5f c3 af 75 3c 9f 23 94 e2 40 01 72 70 08 3b 99 86 8d d6 9b ee e1 ab 37 ef de 8f ca 4f 09 76 ae 11 01 d4 9e c5 a5 74 57 d0 50 d2 f5 f0 06 da 19 d1 1b 8d 3a 86 d0 98 8c 22 Data Ascii: w1\33pfiXF#_u<#@rp;7OvtWP:"JjX;H>[lYr`mu`<i5tC<h/3@E(q1?e-v-X<,['.S#*-,K`q,Netk$5[1I
Oct 13, 2024 20:26:27.371764898 CEST	1236	IN	Data Raw: ba 49 36 97 9f 5f ab 35 0d d9 2a 2b 10 d1 50 4e 8b 56 44 0d 47 73 c4 2e 09 18 46 31 6e 3a be 13 39 1d 16 aa 41 c0 8c 72 ad 8f 5e 66 b6 43 36 b6 8c 90 62 6a 24 91 b4 23 05 88 52 63 ef 74 64 b7 bc 4a 93 99 0c 12 d1 47 60 be 8e 0b b8 0c ed 2d 74 c5 Data Ascii: I6_5*+PNVDGs.F1n:9Ar^fC6bj$#RctdJG`-tn\|ULH1a@5W)95]u5P_'7<?A\|bh/9mnW{Wu7.>JY"8%N!Usfo<>K}'U~uX.@gR,$q
Oct 13, 2024 20:26:27.371779919 CEST	1236	IN	Data Raw: 2a 19 e1 fb f8 e9 b0 cf 7f 56 93 de d4 7d 23 1b e4 18 78 00 a3 03 5c 54 bc c0 70 9d b5 b8 a6 ca b5 8e 87 7d 86 2b 2a 61 45 25 ae a8 fa 92 56 54 a3 60 76 a8 a2 83 12 08 e1 1c 5b ce 43 81 d8 2f 41 b1 25 ac 99 93 82 2b f2 3c ca a2 03 42 64 44 de 90 Data Ascii: V}#x\Tp}+aE%VT`v[C/A%+<BdDCj]=J?Qm^nY["\|5RnR-sO#&3`!Ksjtj^>W%}d4x+u-v xr;3YM]m2[%yj>m<Y-CW{25]O
Oct 13, 2024 20:26:27.371803045 CEST	1236	IN	Data Raw: 69 79 4a 18 6f d3 f7 7a f5 50 c7 67 0c 2b b7 57 35 ef 43 df 84 72 4b 6d 76 c6 01 20 42 bb d6 34 e7 3a ea f8 bf 5b 11 8d 7c 0a 44 c1 8d 2b a6 a7 0c 07 fc 6b 06 8e 73 dd da 96 b4 c8 82 6a d6 e6 e7 21 4c 7d 0c 46 ff 0c 6a 00 81 21 d8 ac 56 ed 92 2c Data Ascii: iyJozPg+W5CrKmv B4:[\|D+ksj!L}Fj!V,5#fvS^dN,t$"9hpa1X1X>A;7.Q}N\6Ge+d,rxBQ\|Cfp{&Dyxgl(pm`~vq5TisY\|IcMREYCwaqW
Oct 13, 2024 20:26:27.371817112 CEST	1236	IN	Data Raw: 02 e9 5e b3 77 78 d6 f3 8d 10 9e b8 57 af d9 d1 ac a2 03 3a 9d 8d 82 2b ae 30 53 22 14 d8 83 a2 49 eb 01 e4 fd 90 cb 36 8d 01 8f 68 e2 f1 c2 4d 95 d8 6f b3 00 ed b2 0d d1 5c d6 cc 6c 12 f1 e3 25 9b bb be 0e 12 b1 b1 fa 05 ae 41 90 f5 42 9f 8c 7b Data Ascii: ^wxW:+0S"I6hMo\l%AB{R#8!)\RO`-pI$8\|Ls1_i)R\Vbb>,}){aj%S5\|Qik4<p'kOyS_T_Zn{v6T&A7$2;U?YP
Oct 13, 2024 20:26:27.371831894 CEST	1236	IN	Data Raw: 04 85 c5 b9 6f 65 99 a7 d7 e8 00 86 c8 7c 2e 67 29 a2 5e fa 0b 88 9c f0 33 fe b1 68 5e 79 84 49 60 0d 01 bc b0 35 fd a8 6f 03 ea b1 54 dc 71 89 b8 5b f1 71 17 4f d1 a1 2c ab 4e 34 63 85 35 36 0b c5 25 e0 a2 1f 00 2e e0 e8 60 0d fe 53 b7 84 45 bf Data Ascii: oe\|.g)^3h^yI`5oTq[qO,N4c56%.`SEaGORCc8.\-)Ne'ymt8]i5i#$pu W>V+qO8jl[4?hfW1n)A#d6JD(]IbY[MJ-
Oct 13, 2024 20:26:27.371845961 CEST	1236	IN	Data Raw: 88 f9 c0 01 ea 4f 2a 52 11 6b 85 c1 80 f4 ea a9 de bb 29 92 bd ae d2 75 d5 54 a9 f2 2b fd cd 69 32 57 4b 07 e4 78 89 95 61 d9 aa c9 63 b6 e6 af 32 ad 8e ae a2 cb 81 f1 43 70 c6 a1 8f 1e 90 a1 09 e9 6d 11 8c b5 09 65 03 28 5f fa d3 35 7d 2b 64 f1 Data Ascii: O*Rk)uT+i2WKxac2Cpme(_5}+d2mVAzclE{M3Y]jZv,Z1R]CnZo -Gx#?:IM`o)3;FF\f9^i.kz~}FdTIJ&K3&
Oct 13, 2024 20:26:27.371860981 CEST	1236	IN	Data Raw: ca fd 5e c8 7d 4b c0 c0 6c d8 95 82 81 12 17 2b dc 8f c8 60 eb 81 fa f3 08 ff 30 49 34 17 2f 68 46 74 76 19 03 52 9f cb 27 55 d0 63 87 73 b1 ac b9 3e 13 bf 8f 7f 4c 74 73 47 e3 56 2a ea 95 cd 93 52 61 c8 71 1d d5 87 56 45 a1 07 38 c4 56 c0 07 7b Data Ascii: ^}Kl+`0I4/hFtvR'Ucs>LtsGVRaqVE8V{F%b,ajj@gP3m(6XDq,$ct-h:`0?!Brbe8R[6@\|@E-8hdZD!T^!dVn@%f'(\G(
Oct 13, 2024 20:26:27.371877909 CEST	1236	IN	Data Raw: 11 7d a5 10 ae b1 04 92 53 eb 35 a5 66 bf 2d 3a 0f b7 62 cd d3 b5 47 f1 14 a3 dc 71 bc be e7 00 f7 1a 50 ae 09 bd b6 f8 f0 34 29 66 cb 34 2e 30 bd 27 2a be b3 d9 0d 5a 39 3c 3b 82 82 8a a4 7c da 63 a1 42 1f 85 e0 5d 16 a0 cd 80 a5 c7 e2 08 68 cb Data Ascii: }S5f-:bGqP4)f4.0'*Z9<;\|cB]hH@1s[YHCWUIJQd<1M1aBrAx,'jRI_s_j%LVDoMo{{xcZ?cRI.21}
Oct 13, 2024 20:26:27.376858950 CEST	1236	IN	Data Raw: 15 78 7f 12 7d 76 6b f3 77 8f af 0d 3b 95 4d a8 cd d0 03 d8 22 85 16 df 08 d7 80 be 1e a8 e8 23 87 53 a3 88 aa 2f da 13 93 a2 b7 15 e3 47 6a ed c8 9b c2 25 ef 6d 6b 75 23 ea 61 ed d4 6a f9 33 4c 0f 94 46 c3 2a 6a 92 49 8e 1a c4 9f 4e 80 b4 de d4 Data Ascii: x}vkw;M"#S/Gj%mku#aj3LF*jIN`c(FUF~6e0\\|j&z#;0$Y2m{p"/Sq(~MuHp6gf2+8~WR.%SV797A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:26.495928049 CEST	297	OUT	GET /assets/js/jquery-3.5.1.min.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.358103991 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "0d1cb65dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 40582 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 69 77 db 46 d2 28 fc 3d bf 02 cc f8 19 00 16 45 4b f6 64 ee 0d bd e8 38 b2 93 78 26 ce 62 39 93 64 28 26 07 22 9b 12 62 0a 60 00 50 4b 2c cd 6f 7f bb aa 7a 5f 40 ca c9 33 e7 be 3c c7 16 09 f4 de d5 d5 b5 d7 83 fb 83 e4 d7 ef d6 ac b9 4e 2e 1e 8d 3e 19 ed 27 37 49 36 cb 93 7f 1c 25 9f d7 eb 6a 5e 74 65 5d 25 45 35 4f ea ee 8c 35 c9 ac ae ba a6 3c 59 77 75 d3 f2 a2 bf fe 06 55 47 75 73 fa 60 59 ce 58 d5 b2 e4 fe 83 8f 06 d9 62 5d cd b0 66 c6 86 49 97 27 ef 3f 4a 92 74 cd df b6 bc f6 ac 4b 1f c3 ef fa e4 57 c6 bf 27 4f 9f 26 dd f5 8a d5 8b e4 bc 9e af 97 2c f9 eb 5f e3 2f 47 ec 6a 55 37 5d cb 1b 48 92 83 24 b3 9f 26 4f 13 36 9a d7 b3 f5 39 ab 3a 2c 42 c5 3a 18 c7 60 2f 57 8f c6 89 31 44 1a 9f fe 94 8b 24 1b e8 76 72 eb 65 92 74 67 4d 7d 99 54 ec 32 79 d9 34 75 93 a5 62 01 1b f6 db ba 6c 58 9b 14 c9 65 59 cd 79 99 cb b2 3b e3 bf 64 43 69 fe d8 6a aa 61 dd ba a9 60 70 d6 8b 5b ea 70 2c 5e dc e6 59 ca 77 82 2d ca 8a cd d3 64 a0 16 44 74 72 20 bf f0 0a 67 65 3b 34 66 76 [TRUNCATED] Data Ascii: iwF(=EKd8x&b9d(&"b`PK,oz_@3<N.>'7I6%j^te]%E5O5<YwuUGus`YXb]fI'?JtKW'O&,_/GjU7]H$&O69:,B:`/W1D$vretgM}T2y4ublXeYy;dCija`p[p,^Yw-dDtr ge;4fv8LXx/&jMC%jF-1=8e!W rX\|4+KkmoX{b5DC[V~/xW>S\|vV\V\|-VM\8YA%9Z_O'Zx69{EW%2Cls__a_-4Fsxkb\|{TM2VtH5J#8YV:vr@5.&>B.$k<@GU`b0\X1d\:k[LJ]3H0$iKG2XT+A65a\|R R#7'1hQWvTD+=s%NvvDO$\d"94opei=\|2uv0}d) PpKy4ZI<"rONc93~#>N~S06
Oct 13, 2024 20:26:27.358118057 CEST	224	IN	Data Raw: 72 b4 b4 d9 70 35 28 5c 79 2b 9b e0 e0 1e 45 bb 11 30 24 20 32 5b 35 5e 8c f9 3e 3d 49 f6 ac a2 50 66 02 a0 0b 5f c4 06 4e ad 3a 54 62 ea 8d 0e 70 f8 51 57 cc de 45 c7 28 01 e6 68 74 ce 9a 53 86 e3 19 19 cb 97 e5 f6 15 21 41 84 df 0f 0d bb 20 6c Data Ascii: rp5(\y+E0$ 2[5^>=IPf_N:TbpQWE(htS!A l(+fgh2{l4V+V{.q(nJ0[q6_Mm8-/k63kNv:y?W#46g
Oct 13, 2024 20:26:27.358133078 CEST	1236	IN	Data Raw: ec a1 d1 2c a0 bd 1d 38 f9 19 62 05 c0 05 fc b4 ef f9 e7 d1 99 1c c7 aa 80 93 39 5a ad 10 bf 1e 24 13 44 11 d5 74 ca eb 4f a6 81 31 56 db ad 9f 3e f4 fc e2 f3 91 45 10 03 8d 93 b5 3a 24 9c c7 18 03 21 cc ff aa 67 2b 3a 39 fc 29 7e a3 1b 4e 90 80 Data Ascii: ,8b9Z$DtO1V>E:$!g+:9)~Nsq/y0CeeBv?Gi@:{%N7*w.}zRKVXDH{eH0s\|jvg'7;r?mVw-4oww-r8[[vv0Pm?9E\
Oct 13, 2024 20:26:27.358222961 CEST	1236	IN	Data Raw: e9 ec 8c cd de b1 f9 4d cb 96 1c de f9 97 a2 bd ae 66 37 c5 ba ab 17 7c 53 5b fc c6 89 ee eb 1b d4 9c d6 cb f6 66 ce 16 ac b9 99 97 6d 71 b2 e4 15 ce ca f9 9c 55 37 65 cb 11 ee cd 92 93 cc 37 e7 eb 65 57 ae 96 ec 86 af 68 75 c3 29 89 79 5d 2d af Data Ascii: Mf7\|S[fmqU7e7eWhu)y]-oz5/k9>SU9`\|?]<\|~[k{zp{;xh3+USor{7L=<LvO:7=cozz;>
Oct 13, 2024 20:26:27.358248949 CEST	1236	IN	Data Raw: 7d a3 cb 0c 54 b7 ff 1e b1 2b 36 03 80 72 d5 97 28 ec 5a 4f f6 a7 8e 14 9d de 7e 8a 67 78 e5 c3 16 0e 09 75 a8 0c ac e4 84 4d de 67 d7 af e6 59 09 76 72 3e 0b ad eb 15 a3 72 8e ed 96 ba 1c c9 d6 40 0d ec 54 11 12 77 a8 b7 20 d5 18 e0 b4 40 9f f0 Data Ascii: }T+6r(ZO~gxuMgYvr>r@Tw @O!ugk<KTnc0goSvd,h0EhP9B~I)i,D\|*X_w,omap~I:unxN.Fk;X2c0nvClctw,211~
Oct 13, 2024 20:26:27.358266115 CEST	672	IN	Data Raw: b0 3e a7 ed 0a ee d5 20 22 ad 01 25 f1 07 af 6f 44 4a f3 34 f9 27 61 be c3 48 89 70 53 20 d0 fa 23 cb 92 79 50 5d a2 c3 49 68 35 9c 91 e1 b0 41 20 13 78 9e 1d 7d e0 02 a9 49 79 44 57 96 9d 8c 16 e5 b2 63 cd e8 95 63 8a e4 cf 17 3e fa 9e 92 7c 73 Data Ascii: > "%oDJ4'aHpS #yP]Ih5A x}IyDWcc>\|s2DmlT_MY\p`Pb`Ks1_5WT^,-<7\|awi/qbvxW(c/*LL{Dk`qO!gz#@~
Oct 13, 2024 20:26:27.358280897 CEST	1236	IN	Data Raw: df 30 8c cd 28 e7 ac 61 0b be b3 89 94 b6 3f 4d e5 37 1b b7 04 df 13 42 78 60 60 84 c7 61 f4 d8 03 c1 7e 8d ce 81 69 b8 5f 00 a6 c9 f3 64 3b c8 8e 1c 8b 17 77 38 b3 08 f3 26 ba d8 80 a6 6c 28 d7 4e 1f e1 2e 1f 0a 2b 91 00 7c b3 8a d6 77 db 8e 55 Data Ascii: 0(a?M7Bx``a~i_d;w8&l(N.+\|wU>0..%eA}F;p\|sPVBVbtNk`:l+DlF#\|VjK@"7h2+v*L4bxaf(3m/MY`Z
Oct 13, 2024 20:26:27.358298063 CEST	1236	IN	Data Raw: 20 1b 14 d9 57 e7 7b 84 54 1e e1 90 9d 48 43 6d ba 9f 5b b5 9d 7a d1 0c 8f b2 71 f2 89 b1 51 a4 b7 f8 b6 65 6b 08 59 bb 34 38 05 bc f5 c7 c9 17 86 13 b8 42 ac 63 2b 60 35 68 e7 ed 27 0d 5b 62 7c 8f b1 b5 6f e9 b3 74 1c 0e 32 20 62 d2 43 aa 12 2b Data Ascii: W{THCm[zqQekY48Bc+`5h'[b\|ot2 bC+XI1K5S4\|9Z(?=r$c}rvw(<BOo'9@F@+Cq( 7D`o:KQ7Rxa5GA]vjA3\~Pwlv
Oct 13, 2024 20:26:27.358314991 CEST	1236	IN	Data Raw: 62 4f c0 c9 82 a4 fd bc 88 a3 7d 0e 55 50 12 d6 74 5d 89 80 40 6c 9e ac 84 62 c5 54 7a 3a 8b 08 30 e2 11 f8 45 56 fb 6e fd c0 8e 15 e1 28 10 07 42 be 33 61 c8 da a4 10 b3 25 04 1a e6 b4 9c 64 31 59 34 98 a7 d9 cd c6 b0 51 f6 5e 54 71 e8 a4 50 52 Data Ascii: bO}UPt]@lbTz:0EVn(B3a%d1Y4Q^TqPR,?J'S[hKV@e~n"-^bvZ.:$LmkUwcg+B'!h\H2$fhzvcNwx(!60RGDe_J?vp%lf2bR:Vh%
Oct 13, 2024 20:26:27.358331919 CEST	1236	IN	Data Raw: 43 a9 88 32 67 6e 6f 99 21 3b b6 cc 1f 15 9e af 87 84 06 c0 01 98 50 fe da 42 f9 4b 21 52 45 4b d0 c7 bc cc 93 64 cd ff 70 cc af 06 20 0e 46 2b 84 c1 94 18 61 50 65 b5 e8 94 58 d7 82 ee e1 3a 1f 12 7c 53 4e fc ac cd b5 ac 58 ca fe 83 73 39 64 d9 Data Ascii: C2gno!;PBK!REKdp F+aPeX:\|SNXs9d\|0vV1\!1A y,rME]lA\|@ [6gK^n6R,YBQ'@HtrU\<3G+}#j:"Pp3^Cl(^)$@z;
Oct 13, 2024 20:26:27.363210917 CEST	1236	IN	Data Raw: 9e 21 fa dd 1b ed 07 9b 38 05 05 4b d4 d6 d1 e6 91 f4 07 bd 43 b3 4b d4 34 c8 f0 9f 08 b4 65 50 a6 b9 44 72 1a 25 0a 52 82 86 cc f5 1c 7c 03 82 15 14 79 ab 3f f1 18 99 b8 64 d1 e4 51 08 dc 10 30 93 6c f5 fc 18 a5 14 bc f4 2d 0a e4 e8 0a 7a 99 47 Data Ascii: !8KCK4ePDr%R\|y?dQ0l-zGDR7KkA\3H`&pQA+VPt8.: c+bD`:I jf/#UH%L~yF\|,Hz #EDRG=`VI
Oct 13, 2024 20:26:27.702383995 CEST	305	OUT	GET /assets/datas/countries/phoneCode.json HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:28.014180899 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 04 Sep 2024 15:02:01 GMT Accept-Ranges: bytes ETag: "9f216565dbfeda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 3756 Data Raw: 7b 0a 20 20 22 41 46 22 3a 20 22 39 33 22 2c 0a 20 20 22 41 58 22 3a 20 22 2b 33 35 38 31 38 22 2c 0a 20 20 22 41 4c 22 3a 20 22 33 35 35 22 2c 0a 20 20 22 44 5a 22 3a 20 22 32 31 33 22 2c 0a 20 20 22 41 53 22 3a 20 22 2b 31 36 38 34 22 2c 0a 20 20 22 41 44 22 3a 20 22 33 37 36 22 2c 0a 20 20 22 41 4f 22 3a 20 22 32 34 34 22 2c 0a 20 20 22 41 49 22 3a 20 22 2b 31 32 36 34 22 2c 0a 20 20 22 41 51 22 3a 20 22 22 2c 0a 20 20 22 41 47 22 3a 20 22 2b 31 32 36 38 22 2c 0a 20 20 22 41 52 22 3a 20 22 35 34 22 2c 0a 20 20 22 41 4d 22 3a 20 22 33 37 34 22 2c 0a 20 20 22 41 57 22 3a 20 22 32 39 37 22 2c 0a 20 20 22 41 55 22 3a 20 22 36 31 22 2c 0a 20 20 22 41 54 22 3a 20 22 34 33 22 2c 0a 20 20 22 41 5a 22 3a 20 22 39 39 34 22 2c 0a 20 20 22 42 53 22 3a 20 22 2b 31 32 34 32 22 2c 0a 20 20 22 42 48 22 3a 20 22 39 37 33 22 2c 0a 20 20 22 42 44 22 3a 20 22 38 38 30 22 2c 0a 20 20 22 42 42 22 3a 20 22 2b 31 32 34 36 22 2c 0a 20 20 22 42 59 22 3a 20 22 33 37 35 22 2c 0a 20 20 22 42 45 22 3a 20 22 33 32 22 2c 0a 20 [TRUNCATED] Data Ascii: { "AF": "93", "AX": "+35818", "AL": "355", "DZ": "213", "AS": "+1684", "AD": "376", "AO": "244", "AI": "+1264", "AQ": "", "AG": "+1268", "AR": "54", "AM": "374", "AW": "297", "AU": "61", "AT": "43", "AZ": "994", "BS": "+1242", "BH": "973", "BD": "880", "BB": "+1246", "BY": "375", "BE": "32", "BZ": "501", "BJ": "229", "BM": "+1441", "BT": "975", "BO": "591", "BQ": "599", "BA": "387", "BW": "267", "BV": "", "BR": "55", "IO": "246", "VG": "+1284", "BN": "673", "BG": "359", "BF": "226", "BI": "257", "KH": "855", "CM": "237", "CA": "1", "CV": "238", "KY": "+1345", "CF": "236", "TD": "235", "CL": "56", "CN": "86", "CX": "61", "CC": "61", "CO": "57", "KM": "269", "CK": "682", "CR": "506", "HR": "385", "CU": "53", "CW": "599", "CY": "357", "CZ": "420", "CD": "243", "DK": "45", "DJ": "253", "DM": "+1767", "DO": "+1809 and 1829", "TL": "670", "EC":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	156.236.70.154	80	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 20:26:26.771563053 CEST	302	OUT	GET /assets/layui-v2.6.8/layui/layui.js HTTP/1.1 Host: telegiraum.club Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 20:26:27.658993006 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 15:02:02 GMT Accept-Ranges: bytes ETag: "0d1cb65dbfeda1:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 18:26:26 GMT Content-Length: 120092 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d4 bd 79 77 db 46 b2 28 fe 7f 3e 05 e4 e4 5d 80 91 48 91 b2 e5 45 b2 ad e3 d8 ce 8d ef 2f 76 72 63 cf f6 28 25 07 22 9b 12 62 0a e0 00 a0 6c 8d ed ef fe eb aa ea a5 7a 01 48 3b b9 ef cd d3 9c 89 09 a0 f7 ae ae ae bd f6 bf dd 49 5e be 78 93 fc 58 cc 44 d9 88 79 f2 ed 7e b2 93 2d d6 e5 ac 2d aa 32 c9 da 41 f2 e1 ab 24 49 d7 8d 48 9a b6 2e 66 6d 7a 2c 9f af f3 3a 11 c9 a3 a4 1d cd ab d9 fa 4a 94 ed 9e 7c 9b 24 a5 7c f7 21 b9 aa e6 eb a5 68 8e 92 0f 9f f6 64 ad bc 5d ab df 6d 71 25 aa 75 7b 94 4c c6 7b 89 b8 96 d5 e0 7d f2 89 2a d7 b2 b2 ed 99 3a 86 bf f6 b2 68 46 d7 f2 63 7a 30 ba 3b ba 8f 03 48 74 a5 0a 47 f1 e3 93 7f fc e5 c5 6f ff f9 e3 4f df 3d f9 31 f9 f8 11 3a c3 af b9 fc 9a c5 da 84 09 b4 f2 a3 18 cd d6 75 2d 07 f2 7a 56 17 ab 56 7d 4d 92 13 ff cb a8 a9 67 e6 eb 51 bc 51 fa 5b 54 75 92 61 fb 7b b8 1e 62 d4 60 0b cd 1e ce b0 1c 2d 45 79 d1 5e 26 c3 64 b2 87 c3 af 8f e5 3f 8f 93 b1 fc 67 38 1c 38 6d 25 49 b1 48 b2 b4 28 5b 51 e7 b2 bf 6b 91 26 8f 1e c9 46 a6 d5 d9 a8 [TRUNCATED] Data Ascii: ywF(>]HE/vrc(%"blzH;I^xXDy~--2A$IH.fmz,:J\|$\|!hd]mq%u{L{}:hFcz0;HtGoO=1:u-zVV}MgQQ[Tua{b`-Ey^&d?g88m%IH([Qk&F\^W-Q['.e;r=i4iy_YQe/x"KALhp@AS`QKh<]VS"Hiy>e2YkQ`G!\r4`v"Vr/tZ.fm9zMsV[ul<$jr,{t55;M/%}?EW5cWj^+\|kl8};6?_KKq("U0Ufo[dJ4boR]eVDcW-,zvnG?}^u0z %R@9@!j`TWX2yWuxqr`]jg<pP8i/:b8jaF1&}>k\xWo`?y4exbOg=`;K^.)EHF
Oct 13, 2024 20:26:27.659023046 CEST	1236	IN	Data Raw: 8b 9e 4f 0f 96 64 2f 99 c9 7b dc 4e d4 7c 5d 05 7b ac 60 8b 0d 3f fd f9 c7 fc e6 f5 9b 27 6f 5e fc f4 2a b9 ad ae af fc ba b8 c8 db 4a 76 bc cc 5b 40 37 ce 02 9c 24 fb bf ce aa ab d5 52 b4 e2 9b 7d e7 d3 91 fc 94 e9 6f 1f 01 21 89 f9 e0 9b 7d bb Data Ascii: Od/{N\|]{`?'o^Jv[@7$R}o!}DnLIFh,k&/DzP2^@AVb9op^Ib XP$ Oxpshj%jSW*/)JgO$Y%hP;<C
Oct 13, 2024 20:26:27.659039974 CEST	448	IN	Data Raw: 29 91 59 d4 7e 93 55 71 e4 0e b0 30 19 8f c3 a3 bf f4 80 44 0d b1 03 29 ef ee 2e 3a ee f0 75 e4 26 2d 32 24 e3 b4 1a 20 8d dd ab 74 69 4f 1e dc 7f 80 57 cc 0a ee b9 17 12 f2 72 73 8c 33 10 66 bc 2b e6 ed 65 6a 28 3a bf 27 00 40 a8 8d f4 8c e2 c7 Data Ascii: )Y~Uq0D).:u&-2$ tiOWrs3f+ej(:'@B43;B:K:fqPta/Yu;H0Yup=VRrC`.y%sr@7#"cx=YXBv(z;\=C? Ed5"`W
Oct 13, 2024 20:26:27.659054041 CEST	1236	IN	Data Raw: 73 c9 18 63 a6 df 83 bf 55 de 5e 1e 25 d3 33 0e f8 8d c8 eb d9 25 6a c5 d9 5b 68 47 ce a9 d5 f2 91 e9 af 5f 9f 65 5f 8f be fd 66 a0 24 23 67 83 e9 e4 8c d8 a4 4e a5 c0 fe af 5f 4b 9a 8a c4 0f 6c fd 41 b6 85 23 67 22 81 af 4f f7 03 79 00 c9 71 88 Data Ascii: scU^%3%j[hG_e_f$#gN_KlA#g"OyqJ_F2@R6$%/%e_&v<$C~<i~*${1hfd[J[UVSp5I0M}(OG_Gg']8!g\|8w[9
Oct 13, 2024 20:26:27.659068108 CEST	1236	IN	Data Raw: ca f4 4a 54 ab c9 15 7a 08 56 fc 64 6f 83 e8 2e 93 e4 71 3b 90 5f 76 77 5d b3 07 55 8d ae 11 e8 4f 15 1d b8 de 07 ee c8 e2 54 57 55 87 a6 c5 51 39 39 23 60 3d 4a 50 4f 33 90 0e 72 a4 55 63 57 59 df 9e 30 fb 69 79 cd f8 a8 a0 42 af 8b f0 3d 50 8b Data Ascii: JTzVdo.q;_vw]UOTWUQ99#`=JPO3rUcWY0iyB=PyLgQ<#W7'jZw/1UL"dug0V/\|DNO]"")U0IHaXj,lj{V$2MQ#`]_ l853`r&L
Oct 13, 2024 20:26:27.659084082 CEST	1236	IN	Data Raw: f9 bb 6a 5d ce e5 29 7f 8a cd fd 22 31 a8 cb 9b af 31 54 85 a4 3f 25 f0 ff 0d 2c 8a f9 c7 9c 7d 24 30 e3 5f 3b 25 ec 1d 80 ae c0 87 2e ec 93 04 1c 7e 24 c4 ff 28 17 18 ed ff e9 f1 4d b5 8a 48 97 f1 88 c0 3d 16 39 06 3e ed e4 b2 65 3e d3 b8 79 c0 Data Ascii: j])"11T?%,}$0_;%.~$(MH=9>e>y`D8\~>=tqp`sm+{D,.9<P^d 7\n=^0i.XJd4^AKd~(kl57-l&eBd@E09Hg3l[L
Oct 13, 2024 20:26:27.659100056 CEST	1236	IN	Data Raw: 6e 43 1d d1 6d 23 03 f7 d1 07 88 c9 0d 61 aa 3f 7c 90 77 fd 6c 59 35 10 a9 f9 d3 a7 54 eb 2a 66 cc 11 49 bc 5f 1d c5 2d 30 1d f9 a3 62 49 e4 f0 d3 0b 2b 1d 31 ba 0f 15 f8 d9 39 89 33 00 36 cf a2 10 25 10 e9 d7 d9 14 bd ac 5e 9f 0d 76 4f 20 d0 41 Data Ascii: nCm#a?\|wlY5TfI_-0bI+1936%^vO A6gSiau@0?\|YHUE1f*-fde7\|}2z2tjuQ!X]S)?48T[Df@=yN`/+YNj
Oct 13, 2024 20:26:27.659121990 CEST	1236	IN	Data Raw: ac 13 00 52 35 c3 13 65 6e 52 6b f5 78 a4 42 7a 0b ef b5 21 b4 fb 08 a8 8e 58 a3 aa bd 21 80 49 bc 91 c7 f1 9a 0a 26 d4 27 b7 ce c3 fd fc 71 18 85 c4 8d 27 e6 47 ee a0 e4 63 5b 84 7b 98 7a ae ce 80 5c f5 11 7a 08 d3 d0 f7 b3 17 9a a1 44 88 08 6c Data Ascii: R5enRkxBz!X!I&'q'Gc[{z\zDlmw""`O[Rc]s<"s@x\|PXVg!acQJuIu,@>3?eXQ_GiC$h~wamBMHX
Oct 13, 2024 20:26:27.659137011 CEST	1236	IN	Data Raw: 2e 91 5b 95 d3 de f9 eb 4a f8 46 36 f5 54 42 bf 3b ff fd 5f b3 db f7 3e de be ff f1 f6 83 8f 77 c6 83 6f d4 8d 53 78 b9 28 71 49 f6 e5 29 d7 01 91 49 dd 60 7a 44 e3 55 8b 10 9e ed c7 f5 f9 93 db 36 52 5c 8e e8 14 50 e8 ce 38 ee 7f d1 bb 27 31 e5 Data Ascii: .[JF6TB;_>woSx(qI)I`zDU6R\P8'1&/"xxSC~X[Y9 <f=n0=sSB^lvt?++>(4 dR%8@V/Jj%C8<V1mQRT0iTJot8E
Oct 13, 2024 20:26:27.659152031 CEST	1236	IN	Data Raw: 03 55 ca ff fd cd 8a b7 7f bb a3 7c 47 fb 87 d1 76 0e 6f df 99 74 bd ef 9e b5 fe 7a df 4b c1 e5 83 45 55 2d 1b ff a0 28 ba a8 be a2 8d bc 7f 57 6e 08 a8 25 82 7e 10 17 61 a1 bb 62 2c f7 eb 5e 7e 2f 2c 54 02 ca 83 76 6e 9f 03 04 dd 3b b8 ef 8e e8 Data Ascii: U\|GvotzKEU-(Wn%~ab,^~/,Tvn;SS&K03^nE><{y2:00{&'9^:fC&NC{\| ~N.-Lop3;cl~Hs=\Q!zwoK[V @j6wz-
Oct 13, 2024 20:26:27.663939953 CEST	1236	IN	Data Raw: 2e d7 ed 05 48 4a 22 12 47 55 f4 c1 70 32 56 83 3d 3c 7c 00 cd 8e 3b 47 20 cb ea f5 ba bb 40 29 c8 ed f3 ae b2 93 b1 19 03 96 3d 14 f7 3b b7 6c 72 30 3c 38 54 85 ef 1d dc 06 81 c9 5c 84 a8 f7 53 80 44 43 58 03 e0 ec 3c e4 e6 e2 9e a6 57 45 09 47 Data Ascii: .HJ"GUp2V=<\|;G @)=;lr0<8T\SDCX<WEG:9ER_a+3&JVqKer.Y65tYt7%$lUQla,)}^.A_K`;K&,2>sQa[#yVBh3821BC+M

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49753	104.16.124.96	443	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:26:27 UTC	587	OUT	GET /cdn-cgi/trace HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://telegiraum.club Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:26:27 UTC	332	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:26:27 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d2160ca7a74185d-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache
2024-10-13 18:26:27 UTC	314	IN	Data Raw: 31 33 33 0d 0a 66 6c 3d 33 38 36 66 37 39 0a 68 3d 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 0a 69 70 3d 38 2e 34 36 2e 31 32 33 2e 33 33 0a 74 73 3d 31 37 32 38 38 34 33 39 38 37 2e 35 39 35 0a 76 69 73 69 74 5f 73 63 68 65 6d 65 3d 68 74 74 70 73 0a 75 61 67 3d 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 0a 63 6f 6c 6f 3d 45 57 52 0a 73 6c 69 76 65 72 3d 6e 6f 6e 65 0a 68 74 74 70 3d 68 74 74 70 2f 31 2e 31 0a 6c 6f 63 3d 55 53 0a 74 6c 73 3d 54 4c 53 76 31 Data Ascii: 133fl=386f79h=www.cloudflare.comip=8.46.123.33ts=1728843987.595visit_scheme=httpsuag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36colo=EWRsliver=nonehttp=http/1.1loc=UStls=TLSv1
2024-10-13 18:26:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:26:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:26:27 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=166748 Date: Sun, 13 Oct 2024 18:26:27 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49755	34.117.59.81	443	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:26:28 UTC	586	OUT	GET /?token=ad76fbd92e6bbb HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://telegiraum.club Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://telegiraum.club/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:26:28 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Sun, 13 Oct 2024 18:26:28 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-13 18:26:28 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49756	104.16.124.96	443	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:26:28 UTC	355	OUT	GET /cdn-cgi/trace HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:26:28 UTC	332	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:26:28 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d2160cec9a88c93-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache
2024-10-13 18:26:28 UTC	314	IN	Data Raw: 31 33 33 0d 0a 66 6c 3d 34 35 32 66 31 39 39 0a 68 3d 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 0a 69 70 3d 38 2e 34 36 2e 31 32 33 2e 33 33 0a 74 73 3d 31 37 32 38 38 34 33 39 38 38 2e 32 39 0a 76 69 73 69 74 5f 73 63 68 65 6d 65 3d 68 74 74 70 73 0a 75 61 67 3d 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 0a 63 6f 6c 6f 3d 45 57 52 0a 73 6c 69 76 65 72 3d 6e 6f 6e 65 0a 68 74 74 70 3d 68 74 74 70 2f 31 2e 31 0a 6c 6f 63 3d 55 53 0a 74 6c 73 3d 54 4c 53 76 31 Data Ascii: 133fl=452f199h=www.cloudflare.comip=8.46.123.33ts=1728843988.29visit_scheme=httpsuag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36colo=EWRsliver=nonehttp=http/1.1loc=UStls=TLSv1
2024-10-13 18:26:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49757	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:26:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 18:26:28 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=166688 Date: Sun, 13 Oct 2024 18:26:28 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 18:26:28 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49758	34.117.59.81	443	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:26:28 UTC	354	OUT	GET /?token=ad76fbd92e6bbb HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 18:26:28 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Sun, 13 Oct 2024 18:26:28 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-13 18:26:28 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:16 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:16 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:16 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 13 Oct 2024 10:59:53 GMT ETag: "0x8DCEB762AD2C54E" x-ms-request-id: 88bd8b3f-d01e-0049-5d65-1de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182716Z-r154656d9bccndzcn7g69nf4gw00000005eg000000000219 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:16 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 18:27:17 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: dc3bb02b-401e-00a3-3765-1d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-1597f696844jcvgbhxyvubykh400000003q00000000071xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:17 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7189cd49-301e-0052-7baa-1c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182717Z-r154656d9bcwntfgrk9d0utmv800000003vg00000000mts4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: fed974bc-201e-003c-5de9-1b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-r154656d9bcwkzx6hvapvnw9vg00000001u000000000dzwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 505df23c-001e-0049-6f65-1d5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-r154656d9bccmm6rkkqtqxp14n00000003mg00000000ns3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e913171f-001e-002b-3daa-1c99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-1597f696844nchg575aqhm8m1800000004mg00000000dqm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:18 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 955ebce8-801e-0015-2665-1df97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-1597f696844rxj9pg4nkdptn1w00000005rg00000000hzvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 0ea201bf-d01e-0065-44aa-1cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-r154656d9bccmm6rkkqtqxp14n00000003ug000000002b37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1c375bc7-101e-007a-77aa-1c047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-1597f696844c8tlv61bxv37s70000000058000000000czyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:18 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 9308204b-401e-0016-0d18-1c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-1597f696844rpl85n5ez24btk000000002c000000000d99v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:18 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bdad252a-001e-0082-77ad-1b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182718Z-r154656d9bccndzcn7g69nf4gw000000057000000000hxvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:19 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 3bab7c63-901e-008f-7e58-1d67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182719Z-1597f6968448fldxhdubbw0s3800000001ug00000000g61q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:19 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0f9ac3ff-201e-0003-4016-1cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182719Z-r154656d9bcsjtmnzb4r14syww00000003bg000000008bbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:19 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: cb6889ee-b01e-0053-4258-1dcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182719Z-1597f696844fbwfwqnpz61ymmg00000004e000000000bwap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:19 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: cc16c119-e01e-0051-7daa-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182719Z-r154656d9bcmwndmrfeb7th8z0000000033g00000000p2f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:19 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e9ae6f2c-401e-0035-2e04-1c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182719Z-1597f696844l6hhwkgu2fa0dk0000000040000000000fcgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 3826920f-501e-0078-42aa-1b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182720Z-r154656d9bcpcz2wp6sxz2m5qw00000003u000000000bgey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:20 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:20 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ddcd0027-801e-008c-55aa-1c7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182720Z-1597f696844mgqk65a7x24zwr800000004ag00000000mhzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:20 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:20 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:20 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 07ac1870-c01e-0082-6158-1daf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182720Z-1597f696844nzckq75sv4z36ng00000005g000000000gzrz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:20 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 51808d96-c01e-000b-55aa-1ce255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182720Z-r154656d9bcgt845bhzh1xbbpc00000002vg00000000hnwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:20 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b287654a-001e-0017-109b-1b0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182720Z-r154656d9bcwntfgrk9d0utmv800000003z0000000008c2v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cc16c32e-e01e-0051-76aa-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182721Z-r154656d9bck5j7z00s9yvttq000000003a000000000kdh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bfebf80b-401e-0048-67a3-1b0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182721Z-r154656d9bc2w2dvheyq24wgc40000000550000000007n6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 290dc9d7-d01e-008e-7658-1d387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182721Z-1597f696844mgqk65a7x24zwr800000004dg00000000b0yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:21 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 2a0e8bd7-601e-003d-55aa-1c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182721Z-r154656d9bcn5z68zdg5vfmy2n00000002x000000000bcx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:21 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:21 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6706c6d4-e01e-0071-1058-1d08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182721Z-1597f696844rxj9pg4nkdptn1w00000005u000000000bvg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:21 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b009cb16-301e-0051-17aa-1b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-r154656d9bcmwndmrfeb7th8z000000003a0000000002pa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fdc3ef1e-001e-0082-3daa-1c5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-r154656d9bcsjtmnzb4r14syww00000003bg000000008bfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 823e37ee-901e-00a0-8065-1d6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-r154656d9bcpcz2wp6sxz2m5qw00000003t000000000dmpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 66d8b07e-601e-005c-6074-1df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-1597f696844sp6bw24kasx1qf000000002pg000000004ww8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c37a83bd-e01e-003c-5758-1dc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-1597f696844rxj9pg4nkdptn1w00000005v00000000091hz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 84516256-001e-00ad-35a3-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-r154656d9bcxgrn9bkxmc6s93s000000047g00000000429y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 32d0e64a-701e-001e-0918-1cf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-1597f696844tcp59u2keq4gm1g00000003eg0000000000fr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bfb1c9d5-701e-0098-6de9-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-r154656d9bcbnsv5vrs89mh8t400000005r0000000008zph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49804	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-1597f69684498bcme7qsm0x75400000002bg0000000065vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 87881c48-e01e-0003-6e86-1d0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182722Z-1597f696844rpl85n5ez24btk000000002d000000000b8g3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 13e99002-401e-0067-75aa-1c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182723Z-1597f696844lq27kahy39f1g9800000005r000000000avzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 9570bf10-101e-007a-52ac-1b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182723Z-r154656d9bcmmmdt3t1uc4cyxn00000002y000000000fs16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: dc3bb608-401e-00a3-0665-1d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182723Z-r154656d9bcpcz2wp6sxz2m5qw00000003y0000000000pgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 5509e5ef-201e-0003-0aa3-1bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182723Z-1597f69684498bcme7qsm0x75400000002c0000000004vzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: aed53b6a-001e-00ad-31aa-1c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182723Z-r154656d9bccndzcn7g69nf4gw000000057000000000hy4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:24 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 4a48b82a-601e-003d-45a3-1b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182724Z-r154656d9bcsjtmnzb4r14syww00000003bg000000008bmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 3498d06d-d01e-007a-1965-1df38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182724Z-1597f696844nfskpzm4cq1mwm0000000034000000000k2xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:24 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 29a213d0-e01e-0033-71a3-1b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182724Z-1597f6968448fldxhdubbw0s3800000001xg000000008210 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 25ce0d99-d01e-008e-49a9-1c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182724Z-r154656d9bcw8wfsu93rvvbgpc00000004kg000000000b5x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0cf8d61e-c01e-007a-376e-1db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182724Z-r154656d9bccmm6rkkqtqxp14n00000003n000000000hs1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f73323c8-301e-0033-0b6e-1dfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182725Z-r154656d9bcwd4kdv0wzn7nx6800000005m00000000063un x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: c910b895-901e-0029-7baa-1c274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182725Z-1597f6968449rfbwy0gum5gta400000001wg00000000kh1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: bd18120e-e01e-0099-1f6e-1dda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182725Z-r154656d9bcgt845bhzh1xbbpc0000000320000000002hyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 66ed7e7f-601e-005c-0a7c-1df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182725Z-1597f696844wc89hvq6ns9m5xg0000000350000000002dvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: c8f4023d-c01e-0082-7904-1caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182725Z-r154656d9bcpcz2wp6sxz2m5qw00000003vg000000007k44 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-1597f69684469lsz07pz1m8tt0000000044g00000000g29y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 04e5f34d-001e-008d-1aaa-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-1597f696844jcvgbhxyvubykh400000003k000000000m3ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fe6b1adb-c01e-002b-1ab1-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-r154656d9bcbnsv5vrs89mh8t400000005q000000000dece x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ec734971-401e-0035-389c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-r154656d9bcn4hq48u66n9b5qn00000003000000000017up x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 48fd43b3-001e-0066-39aa-1c561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-1597f696844d2h6g34xqfa1q1n00000005h000000000mftz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: bef1da19-c01e-0034-1da3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-1597f696844wc89hvq6ns9m5xg000000032g000000009pq2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 805247ec-201e-000c-7bb2-1b79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-r154656d9bckv8gm0dh0xawdts00000002r000000000c69r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182727Z-r154656d9bcbnsv5vrs89mh8t400000005mg00000000ka3y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2107670c-301e-0096-3a65-1de71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-r154656d9bc2w2dvheyq24wgc4000000056g0000000030a5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9aad704f-d01e-0049-789c-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182726Z-1597f696844fdr9mg75dks44hc00000002bg00000000n8h2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 0dbfe92b-d01e-0082-7aa8-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182727Z-1597f696844rpl85n5ez24btk000000002e0000000007hr5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182727Z-r154656d9bcmwmqmakkk5u75vn00000002ng000000007ue9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: cfeb49d8-101e-0034-7489-1d96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182727Z-1597f696844c8tlv61bxv37s70000000057g00000000fsq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:27 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a21a4854-301e-0051-4eaa-1c38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182727Z-r154656d9bcr869216m69ap4xs00000001v0000000004at3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182728Z-r154656d9bcqc2n2s48bp5ktg8000000053g000000005eqe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1871f2a9-701e-0021-15ac-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182728Z-r154656d9bc2w2dvheyq24wgc40000000550000000007nn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ca6815b7-a01e-0053-63aa-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182728Z-1597f69684498bcme7qsm0x754000000025g00000000ppkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182728Z-r154656d9bc9b22p5yc1zg6euw00000005q000000000mb2c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: f6e61b95-101e-005a-6865-1d882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182728Z-r154656d9bcvhs4tvca1phhah400000004bg000000006477 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: f6c7d517-101e-005a-6c58-1d882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182728Z-1597f6968447j5lf3znmew1ya0000000059g00000000dyxk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 6706d49a-e01e-0071-8058-1d08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182729Z-r154656d9bcsjtmnzb4r14syww00000003dg000000002845 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 672532c1-e01e-0071-7a65-1d08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182729Z-r154656d9bcpx9trrv16tqwhac00000005ag000000001qv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1996b7fc-c01e-00a2-57a3-1b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182729Z-1597f696844lq27kahy39f1g9800000005qg00000000dbsx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:29 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 5fc941fd-401e-0078-0958-1d4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182729Z-r154656d9bczmjpg03n78axyks00000004bg00000000cpwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:29 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:29 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 159a0ade-a01e-0002-4958-1d5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182729Z-1597f696844tcp59u2keq4gm1g00000003ag00000000bqvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:29 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:30 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:30 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:30 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182730Z-r154656d9bcxgrn9bkxmc6s93s000000042000000000htpe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:30 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: b01dadfb-501e-0047-380e-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182730Z-1597f6968449dtd4rerar9yx3g00000003bg00000000hug5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:30 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:30 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 821af275-901e-00a0-6f58-1d6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182730Z-r154656d9bcwkzx6hvapvnw9vg00000001sg00000000gnfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:30 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:30 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:30 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 5e4857da-301e-0051-0d6e-1d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182730Z-1597f6968442xc587gse7r7pz400000003a0000000007frm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:30 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:30 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:30 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:30 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 57c70db3-001e-0028-2cb0-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182730Z-r154656d9bctswmlx698hzzxeg000000027000000000d0f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:30 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 5fc9445b-401e-0078-5158-1d4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182731Z-r154656d9bcvhs4tvca1phhah4000000048g00000000dxx8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 16a33649-001e-008d-051c-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182731Z-r154656d9bcmmmdt3t1uc4cyxn00000002y000000000fsaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 6276e3ab-201e-0096-2374-1dace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182731Z-1597f696844nzckq75sv4z36ng00000005pg000000000erd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:31 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: aed541fd-001e-00ad-24aa-1c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182731Z-r154656d9bcp74cth8ay97rud400000004ag000000006ym6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:31 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:31 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 900b7353-101e-0065-7258-1d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182731Z-1597f696844c8tlv61bxv37s70000000059000000000ahtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:31 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 15941f9a-901e-002a-1789-1d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-1597f696844rxj9pg4nkdptn1w00000005x0000000003dre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-r154656d9bcq7mrvshhcb7rrsn00000005rg00000000124s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-r154656d9bcchbvnb0vwh9y8hg00000003h0000000002chz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6e942c59-301e-006e-62aa-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-1597f696844df8kn9nzayxan4c00000003g0000000002u1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: b18294e8-f01e-0099-0a58-1d9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-r154656d9bcw8wfsu93rvvbgpc00000004bg00000000kbeg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-1597f696844l6hhwkgu2fa0dk0000000042g000000007des x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: eb4d8ac2-801e-008f-2a87-1b2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-r154656d9bcbnsv5vrs89mh8t400000005m000000000m59d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: a2b1ec5b-001e-002b-54a3-1b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-r154656d9bcwntfgrk9d0utmv800000003wg00000000cvt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:32 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6666e0d8-401e-0078-0e1c-1c4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182732Z-1597f6968442xc587gse7r7pz4000000035g00000000kvq9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:33 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: bdd2ff94-b01e-0084-4174-1dd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182733Z-1597f696844k2m9pqrs95e33c400000000qg000000001rsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:33 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 3741127a-101e-008d-0baa-1c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182733Z-1597f696844df8kn9nzayxan4c00000003ag00000000kqnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49868	13.107.253.72	443	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:33 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b2dce909-c01e-002b-7658-1d6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182733Z-r154656d9bcjrz4rk2gwuhddm400000001y000000000cu2k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:33 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: aa7a2717-401e-0067-41a3-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182733Z-r154656d9bcfdpxm774x69new000000001q000000000kwkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:33 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:33 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: aed54423-001e-00ad-73aa-1c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182733Z-1597f696844wc89hvq6ns9m5xg00000002yg00000000n9ak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49871	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:34 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:34 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 9f3ebae8-001e-0066-38a3-1b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182734Z-r154656d9bcjrz4rk2gwuhddm4000000020g0000000069qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49872	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:34 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:34 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: d65e9d5d-201e-0096-63aa-1cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182734Z-1597f696844nfskpzm4cq1mwm0000000035000000000ezz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:34 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49873	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:34 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:34 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: bb124653-001e-0028-7d74-1dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182734Z-1597f696844wc89hvq6ns9m5xg000000030g00000000fpms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49874	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:34 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:34 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:34 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cb68a3f3-b01e-0053-6d58-1dcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182734Z-r154656d9bck5j7z00s9yvttq000000003g0000000003ez0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:34 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49875	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:34 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:34 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4704ee26-501e-0047-65aa-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182734Z-1597f69684422wgj3u8kq0401g00000004c0000000006gw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:34 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:34 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 102ac5c1-201e-0051-1a16-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182734Z-r154656d9bcd97zmh7kafnma0800000001qg00000000697s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:35 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2dceb4e-c01e-002b-2158-1d6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182735Z-1597f696844nzckq75sv4z36ng00000005k000000000af7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:35 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:35 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:35 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182735Z-r154656d9bcwd4kdv0wzn7nx6800000005hg000000009kde x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:35 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49879	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:35 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 16892f44-001e-008d-0d14-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182735Z-1597f696844rpl85n5ez24btk000000002e0000000007hza x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49880	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:35 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 47bad248-d01e-0014-2e9c-1bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182735Z-1597f696844jcvgbhxyvubykh400000003kg00000000hss6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49881	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:35 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 31a15c4e-201e-006e-3f58-1dbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182735Z-r154656d9bch5pgf1scf5w2u6400000003cg00000000dpwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49882	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 045caced-d01e-0049-3578-1de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-1597f69684469lsz07pz1m8tt0000000049g000000002hzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49883	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:35 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 1bc9433a-f01e-0099-70ec-1b9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-r154656d9bcwntfgrk9d0utmv8000000040g000000003he4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49884	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8e2f4d00-001e-000b-08a9-1c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-1597f696844rxj9pg4nkdptn1w00000005u000000000bw30 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49885	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: c3b40bb5-401e-0029-34de-1b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-1597f696844fbwfwqnpz61ymmg00000004c000000000gpa6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49886	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: f7429604-301e-0033-1174-1dfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-r154656d9bcr869216m69ap4xs00000001s000000000bmg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49887	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f6f11fce-501e-0029-52ad-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-r154656d9bc25bv85eq198756g00000004ug00000000haxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49888	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 54b073c4-001e-0034-7c58-1ddd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-1597f696844nchg575aqhm8m1800000004q0000000007qdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49889	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: d184da79-201e-0085-6797-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182736Z-r154656d9bc25bv85eq198756g00000004z0000000008d0d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49890	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:36 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 878b0b92-e01e-0003-7787-1d0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182737Z-1597f696844c8tlv61bxv37s7000000005bg000000002qhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49891	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 1000688e-201e-0051-7e07-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182737Z-1597f696844k2m9pqrs95e33c400000000n0000000009d4k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:37 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49892	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:37 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:37 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4483d5b6-901e-00ac-7baa-1cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182737Z-r154656d9bcjrz4rk2gwuhddm40000000200000000007bgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:37 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49893	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:37 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2109250f-401e-00a3-5eaa-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182737Z-r154656d9bcwntfgrk9d0utmv800000003w000000000f66g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49894	13.107.253.72	443	6104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:37 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 35413434-b01e-0070-2baa-1c1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182737Z-1597f6968447j5lf3znmew1ya0000000057000000000pmqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49895	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:37 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:37 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3416241d-101e-0017-0e65-1d47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182737Z-r154656d9bck5j7z00s9yvttq000000003h0000000000hkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49896	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:38 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 554118dd-201e-0033-7707-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182738Z-r154656d9bcn5z68zdg5vfmy2n00000002x000000000bdee x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49897	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:38 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 1e25398c-e01e-0051-4965-1d84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182738Z-1597f696844nchg575aqhm8m1800000004h000000000mysm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49898	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:38 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 0fb66bec-901e-0048-46aa-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182738Z-1597f696844rxj9pg4nkdptn1w00000005s000000000hry1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:38 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49899	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:38 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:38 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 82760b2e-201e-0051-3258-1d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182738Z-r154656d9bcxgrn9bkxmc6s93s000000041g00000000hd6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:38 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49900	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:38 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:38 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 1384c3b0-d01e-0082-240e-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182738Z-1597f69684498bcme7qsm0x75400000002c0000000004wft x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:38 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49901	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 43e0701a-601e-0084-6298-1d6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-1597f696844mgqk65a7x24zwr800000004c000000000f15x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49902	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:39 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 5d323332-a01e-003d-2158-1d98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-1597f696844wc89hvq6ns9m5xg0000000350000000002e98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49903	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:39 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 103cb033-201e-003f-56aa-1c6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-r154656d9bcw8wfsu93rvvbgpc00000004c000000000hf42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:39 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49904	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:39 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 51b00628-e01e-003c-6496-1dc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-1597f696844fbwfwqnpz61ymmg00000004eg000000009v3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:39 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49905	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:39 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: fb15219e-a01e-006f-69ac-1b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-r154656d9bcq7mrvshhcb7rrsn00000005n000000000a7cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:39 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49906	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 5332317d-c01e-0014-7087-1da6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-1597f696844nfskpzm4cq1mwm0000000033g00000000n7mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49907	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:39 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 290df509-d01e-008e-4258-1d387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182739Z-r154656d9bcpcz2wp6sxz2m5qw00000003x0000000003mcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49908	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e76d48f7-201e-0000-22a3-1ba537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-r154656d9bcpcz2wp6sxz2m5qw00000003x0000000003mdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49909	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 900b8087-101e-0065-6758-1d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-r154656d9bcwd4kdv0wzn7nx6800000005fg00000000fyx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49910	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: d399f225-601e-0001-7296-1dfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-1597f696844f9fx992w24p5u140000000250000000007ep1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49911	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 57f7ccae-001e-0046-6858-1dda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-r154656d9bcw8wfsu93rvvbgpc00000004h000000000424g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49912	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c37aa300-e01e-003c-2f58-1dc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-r154656d9bcd97zmh7kafnma0800000001n000000000d009 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49913	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 60cbbc17-c01e-008e-1f74-1d7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-r154656d9bcw8wfsu93rvvbgpc00000004cg00000000gaqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 18:27:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49914	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 18:27:40 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 18:27:41 UTC	584	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 18:27:40 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 3bab9e33-901e-008f-7e58-1d67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T182740Z-1597f696844xv6vztzrdgxqrz800000002wg000000009v8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 18:27:41 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Target ID:	0
Start time:	14:26:17
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:26:20
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2220,i,1938976502007364758,12421088361425760724,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:26:22
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://telegiraum.club/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://telegiraum.club/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Windows Analysis Report
http://telegiraum.club/