Edit tour

Windows Analysis Report
Mortgage Calculator and Comparator.xlsx

Overview

General Information

Sample name:	Mortgage Calculator and Comparator.xlsx
Analysis ID:	1541255
MD5:	c29f73edea517836cce09300b58b8b1c
SHA1:	b338d8ebcce01887972df73f060034b9466f55f3
SHA256:	f8097b190a9ee64c31755361f50b48ba2093c1bbce93d673f29a1bcd7dc7e06a
Infos:

Detection

Score:	7
Range:	0 - 100
Whitelisted:	false
Confidence:	40%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains more sections than normal

PE file contains sections with non-standard names

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 3788 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 3176 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

chrome.exe (PID: 3720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2016,i,1178374307907939946,2446228775624378766,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.excelworks.co.uk/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

EXCEL.EXE (PID: 5412 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\Mortgage Calculator and Comparator.xlsx" MD5: 4A871771235598812032C822E6F68F19)

cleanup

Sigma Signatures

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.253.45, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 3788, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 50013

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.5, DestinationIsIpv6: false, DestinationPort: 50013, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 3788, Protocol: tcp, SourceIp: 13.107.253.45, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://www.excelworks.co.uk/

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\LICENSE.txt

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:50013 version: TLS 1.2

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.8.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.8.dr

Source: excel.exe

Memory has grown: Private usage: 2MB later: 81MB

Source: global traffic

TCP traffic: 192.168.2.5:53671 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 13.107.253.45 13.107.253.45
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/html; charset=utf-8Content-Length: 5822Connection: keep-aliveKeep-Alive: timeout=15Cache-Control: privateContent-Encoding: gzipVary: Accept-EncodingServer: Microsoft-IIS/10.0X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Thu, 24 Oct 2024 14:18:48 GMTData Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 7e e3 e4 f1 ef fa f4 cb 93 37 bf cf cb d3 74 de 2e ca f4 e5 57 4f 9e 9f 9d a4 1f 6d df bd fb dd 7b 27 77 ef 3e 7d f3 34 fd bd bf fd e6 8b e7 e9 ee 78 27 7d 53 67 cb a6 68 8b 6a 99 95 1f a5 1f cd db 76 f5 e8 ee dd ab ab ab f1 d5 bd 71 55 5f dc 7d f3 ea ee 3b c0 d9 c5 8b fa eb 76 eb bd 35 9e b5 b3 8f 8e a8 5b 7c 95 be 5b 94 cb e6 b3 08 9c dd 87 0f 1f ca eb 1f a5 d4 fa c7 1e cf f3 6c 96 16 b3 cf 3e fa 36 fd b2 fb d1 d1 e3 b6 68 cb 1c 5f 9d be 9b e6 65 fa dd aa 7e db a4 cf db 59 ba 9d ca 27 cd aa a6 a6 cd 3c cf db 74 96 37 c5 c5 32 fd 85 e9 4f 3e 39 4e 57 75 75 51 67 8b 45 b1 bc 18 a5 a7 cb 8b 32 5b ce d2 af 7e 2f c2 e9 ae 00 7d 5c 16 cb b7 e9 bc ce cf 3f fb a8 69 af cb bc 19 4f 9b e6 a3 b4 ce 4b f3 01 a0 7e 94 b6 d7 ab fc b3 8f da fc 5d 7b 97 1b dc 05 3e 3f f6 b8 99 d6 c5 aa f5 bf fd e9 ec 32 93 4f 3f 3a 4a d1 e6 c7 ce d7 cb 29 28 92 4e e7 d9 f2 22 3f 29 b3 a6 d9 2a 66 a3 74 8a df 5e 64 8b fc 4e fa 8b b9 e5 8f 15 e7 e9 d6 ac 9a ae 17 f9 b2 1d 5f e4 ed 69 99 e3 d7 27 d7 67 33 7a e3 4e fa bb 7e 96 2e d7 65 69 db ff d8 86 c6 63 0b fe 33 fb db a1 bc f6 4b f8 87 fc 6b b1 2b 96 4d 5e b7 df a6 79 a0 b7 47 29 26 e4 75 5b 13 e5 6c 6f df 28 76 c5 72 99 d7 e0 b6 cf 5c 4f 7d f4 1e df 15 5a 32 29 1f df 05 6b 80 f0 8f 27 d5 ec 3a 05 8f bc a9 56 4f e8 77 f0 19 b5 3e af ea 45 ba c8 db 79 45 5f ad aa 86 26 2e e3 d1 7d f6 d1 f8 ee 47 fc c2 22 6b da bc 7e 99 5d e4 78 e7 f1 ac b8 94 79 f8 ec a3 ac 59 bd c8 db 6f 17 b3 59 be e4 ef 8a e5 6a 6d e6 76 2e 1f a7 4b a2 e2 67 1f fd fe bf ff 4f 9e 9d 7e f7 f5 9b e3 37 a7 02 35 f8 e0 32 2b d7 d4 e8 ee d5 e9 cb a7 57 5f 7d e7 c5 d3 2f ae 5e bc f9 7d 76 bf 78 fa fb fc e0 e9 de 4f 7c f7 78 f1 fb bc fc a9 27 bf cf c9 f1 c5 17 fa f3 34 f8 f9 53 17 0f df 3e bb f8 ce 02 6d 9f 1c 9f 3d 79 fa ee f7 39 f9 f6 c5 ab af 7e ea f7 9e ef 3c 99 7c 71 fa f2 db 2f ae 7e 9f ef ee 5f 64 df fd 89 87 67 8b dd 72 b2 fc ea dd 59 f1 e4 a7 27 9f 3f fb c1 f4 07 3b c5 e4 bb 3f b9 9e fd e4 8b 72 f2 f9 4f fe f4 ec f3 9f 7c 7b f6 d3 f7 cf 26 7b bb e5 cb 93 87 3f 98 7e fe 6c fd b2 f8 a9 f5 ef b3 7c 71 f5 e5 bd ab c5 64 f1 9d 1f 4c 9f 36 07 d3 7b 4f e6 93 e2 c9 ea a7 9e ea fb 6f ce 8a 97 3f fd 6e 7e f6 f9 fc fa a7 be fb fb 3c 3c 2b f6 2f 7f ea f3 9f 5c fc 3e bf f7 4f 36 b3 93 fb 73 6a bf ff 92 de f9 a9 bd af 1e 7e 51 fc d4 7c f2 79 39 9f fe 60 f7 c9 ef b3 78 b8 3b 3b 79 f2 7a b2 37 2b a7 c5 93 33 6a bf 33 f9 fc ab 8b e7 af
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: text/cssContent-Length: 2065Connection: keep-aliveKeep-Alive: timeout=15Content-Encoding: gzipLast-Modified: Thu, 09 Feb 2017 14:33:46 GMTAccept-Ranges: bytesETag: "38ea485e182d21:0"Vary: Accept-EncodingServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Thu, 24 Oct 2024 14:18:48 GMTData Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 fe c7 bf f7 1f 9c 54 b3 eb f4 17 ff c6 c9 8f 2d b2 fa a2 58 6e b7 d5 ea 51 ba b7 b3 7a 77 e8 3e 9b 54 6d 5b 2d 1e a5 bb e1 c7 65 7e de 3e 4a b3 75 5b 79 1f d6 c5 c5 dc fb 74 52 d5 b3 bc a6 57 57 ef d2 a6 2a 8b 59 5a 5f 4c b6 76 f7 0e 46 fa ff 3b 68 55 16 cb 7c 7b 9e cb ab bb e3 7b f7 f1 61 9b bf 6b b7 b3 b2 b8 58 3e 4a d1 15 3e bb cc eb b6 98 66 a5 f9 9c b0 c5 c7 e7 d5 b2 dd 6e 8a 1f e4 8f d2 87 f7 7f 77 fb c9 79 b6 28 ca eb 47 e9 4f e6 f5 2c 5b 66 a3 f4 b8 2e b2 72 94 7e 3b 2f 2f 73 c0 19 a5 4d b6 6c b6 9b bc 2e ce f1 d6 b4 2a 2b 42 16 28 de df 1d f1 ff 18 bf 49 36 7d 7b 51 57 eb e5 6c db 6b b2 77 ff fe 68 ef fe ce 68 6f ff 3e b7 ba 2a 66 ed 9c 30 d8 01 06 bf e4 37 4e 7e e3 64 3c 25 34 32 1a 5c 0d 12 bb 8f f2 65 ab 1f d8 3f c7 18 22 3e fc b1 55 36 9b 15 cb 0b 25 af 99 0a f3 a9 d2 77 f7 7e f8 31 11 e2 51 da f9 cc 4c 9b 7e 2c 53 61 01 04 13 b2 b7 b7 3b d2 ff 63 28 01 62 53 fa b7 ce 7f 36 51 0b ba 63 28 b7 ef ad fb f1 cd bd 19 42 08 d8 9b e8 f0 1b 27 77 bf 95 be 3c fe fc 34 7d fd e6 f7 79 7e f6 e2 f3 f4 5b d1 e7 2e 8d 61 95 5d e4 df ae 16 f9 09 0d 44 28 46 00 ec a7 af 80 30 3e b4 78 31 ae 86 5c cc b1 c2 c3 3b e3 07 f7 f3 05 7d 48 af 2b 80 d7 55 b9 6e 8b 6a d9 7c 41 ec c4 40 94 db 76 77 0c bb 85 ed 9e e6 c4 78 65 e3 37 7d c0 a2 41 2d b5 ed d3 ea 6a 59 56 d9 ec 26 98 b6 5d 04 e6 c1 c6 96 5f 63 c8 be 0c 3e bc 3f e2 ff d9 a9 e0 4e 8e 27 d5 ba 75 24 f6 30 f1 5b 7d bb a8 a9 3f d7 8c be e1 cf 4f 97 17 19 e9 a9 8b 57 d5 45 5e 7f 0d fc 08 8e 42 3a a1 6f b3 69 7b 42 14 5f 2c 9f 13 33 31 a0 01 0d a5 48 de 0b c8 15 40 70 b8 6c 06 a1 9a 95 60 28 94 e7 f9 45 56 ba 81 9a 76 a2 08 5d b3 b3 05 fd d3 6f e6 e6 9a 39 fd cd f1 e7 37 30 3a 38 7d be cb 20 1c 7d 76 c7 fb 4c 1d f9 e8 4a 35 f9 a4 2a 67 f8 d0 9b d2 9d d1 ce 68 f7 9e 9b d1 f9 5e 07 12 d4 ff d7 04 75 af 0f 6a 6f 03 28 35 58 44 5d ab 45 04 ce 7e 1f ce ee 6d e1 28 e7 e8 67 46 f1 6c 3f e0 8f 05 fc fd 2e f8 9d f1 c3 5b 82 17 2c cd 47 16 fa ee 1e 7f 2e e0 d9 d4 fc 98 35 a6 fc 8d 4f 36 b6 58 f2 7f 4b ba c9 b8 59 64 65 c9 6f 32 12 21 62 dc a6 2c 88 8d 58 48 9e 70 bf dc 58 3f b1 a8 78 e3 5c 8d 17 46 ad f8 96 fc a7 d7 4d 5b 9c 5f bb 56 f9 72 f6 a2 6a 85 27 83 be 0f 44 e0 7c dc 59 1b d0 ff 2c e2 ab 71 9d cf d6 d3 7c 26 38 7d c1 84 61 50 1d 1a c9 bc d0 3b d1 37 9e e7 8d 68 b5 ce 5b db 07 e6 b5 81 17 bf c3 a3 29 f2 59 ec 65 e9 73 f3 e8 15 e6 9b 6a 25 00 7d 2

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=PCUaERDz9kFwZZF&MD=ETnYge3c HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=PCUaERDz9kFwZZF&MD=ETnYge3c HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.excelworks.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.css HTTP/1.1Host: www.excelworks.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.excelworks.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.excelworks.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.excelworks.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __utma=78228160.630882712.1729779529.1729779529.1729779529.1; __utmc=78228160; __utmz=78228160.1729779529.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=78228160.1.10.1729779529

Source: global traffic	DNS traffic detected: DNS query: www.excelworks.co.uk
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=15Cache-Control: privateServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Thu, 24 Oct 2024 14:18:50 GMTContent-Encoding: gzipData Raw: 38 31 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 58 6b 4f e3 c8 12 fd 7c f9 15 bd 19 31 9f e2 47 1e bc 9c 90 2b 36 80 06 09 e6 a2 81 d9 dd 2b 21 8d 3a 76 27 b6 b0 dd d9 ee 0e 21 1b ed 7f bf a7 ba ed c4 10 60 b5 2b 5d 46 93 c4 4e 55 75 d5 a9 53 0f 67 f8 d3 f9 7f c6 f7 ff bd bd 60 a9 29 72 76 fb fd e7 eb ab 31 6b 79 41 f0 6b 6f 1c 04 e7 f7 e7 ec b7 2f f7 37 d7 ac e3 87 ec ce a8 2c 36 41 70 f1 b5 c5 5a a9 31 f3 28 08 96 cb a5 bf ec f9 52 cd 82 fb 6f c1 33 59 e9 90 5a f5 d1 d3 56 c7 4f 4c d2 1a b1 bd a1 3d e5 b9 c8 4b 7d fa 86 85 ce c9 c9 89 53 74 c2 82 27 a4 64 32 93 8b d1 d5 d5 1d eb 84 70 e3 5c 18 9e e5 22 61 17 4a 49 c5 3c d6 0f fb b8 ed b1 af d2 b0 4b b9 28 93 61 e0 54 a0 ab cd 2a 17 cc ac e6 e2 b4 65 c4 b3 09 62 ad ad f1 9f 3c 8f ed 4d 64 b2 5a 17 5c cd b2 32 0a 07 53 59 1a 4f 67 7f 88 c8 3f 12 85 bb 9c f2 22 cb 57 d1 2f 42 25 bc e4 ed 33 95 f1 bc fd 45 e4 4f c2 64 31 6f 6b 5e 6a 4f 0b 95 4d 07 7f b2 bd 58 26 62 6b 2e 96 b9 54 d1 a7 30 3c 3c 0c 9b c6 3b 7e a7 b6 be 14 d9 2c 35 d1 44 e6 09 e9 fb b1 2c a7 d9 ec 87 96 0b 15 0b 66 cd 35 9c 3a 86 da c6 68 88 3f d2 99 ab c6 91 5b e1 8e df 87 f4 52 aa c4 5b 2a 3e 8f 26 4a f0 47 8f ae 49 69 91 b7 65 5e 7b da 09 e7 cf 2c 04 b6 78 3b 98 3f bb ef fd 69 a6 b4 81 94 fb 50 c9 7a 46 ce a3 4a 66 9a 89 3c d1 c2 ac e7 3c 49 b2 72 16 c1 04 be 72 76 e8 93 3b dd 1e 5c 1d cf f3 dc 86 a9 17 05 40 5f 79 08 17 a9 2c 85 62 af 8d 79 13 69 8c 2c ec 59 2e 3f f6 e8 be 73 2f 17 33 51 26 7e 29 3d f1 3c e7 65 e2 c1 f0 c6 8d 2e f9 40 8e 40 d8 3a 33 a8 13 8c 20 41 93 0e 04 c8 0b 67 64 5d 01 da b3 7f 83 5a 96 74 43 76 8c 57 27 ff a3 e1 04 70 1a b0 3d 0b 75 33 7f 0d ec 81 3c 0e e0 51 9e 95 8f 6d 1e 3d 65 3a 33 22 a9 8f 0a c3 a3 8b cb 4b 47 af a6 01 ab 92 ca 27 a1 d6 c4 54 2f 11 b1 54 dc 64 b2 8c 4a 59 0a 32 99 76 d6 db 63 ba 36 c5 75 70 35 33 2e 61 9a 24 bb 0d c9 8e e5 f3 6b c9 f1 b8 e6 50 da 7b 21 4c cc a9 84 2b 6e 00 b8 da 7e 43 ab ff 42 ab bb a3 45 49 08 01 d5 9f 9f 52 54 32 c2 5a 66 89 49 a3 93 c3 fd da 3c 25 84 6c d7 14 3a 84 46 77 9f b9 b7 81 0d b5 2a c0 96 51 62 b2 88 53 61 d8 cd 5d ab 5d d7 63 a3 fe d8 1e 0a c6 56 1c 41 30 e1 f1 e3 4c 51 33 00 cb ec dd 83 f1 f1 d1 cf 5d eb 0e f1 4e 94 66 5d 23 62 bd e8 ee 0f e6 12 89 22 bc 95 c8 01 fc 93 c5 dc df 61 6b 9b ea 94 0c 6c 09 bc de 9e 17 7d a2 f3 5f 87 6a e9 0b 3e 6d 42 25 64 df 39 70 c7 3a 9b 37 5d 75 39 b1 81 24 b6 15 6a 2f 17 53 53 a1 db 3b d8 1f 4c 73 c9 4d 44 37 2b a0 3d 65 fb 0c 42 a4 6c d4 5a f6 66 a5 76 d8 7b a1 46 2c 84 95 65 94 66 49 22 4a ab 86 36 87 bb 3f f0 5f 03 a3 46 32 7f a4 ae 8d 75 10 51 91 95 5e f3 b2 ea ad 40 d8 b1 a1 ce 74 07 c2 94 6a 2a 31 b8 b5 cd 1c 81 87 54 6e f1 dc e4 ef ec e8 f2 ec 60 30 41 0b 13 aa ee 0f 64 45 cb 3c 4b d8 a7 71 67 7c 79 7e 5e 7f 4f 8d aa f1 65 ff ec 70 7c

Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD41570.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: widevinecdm.dll.8.dr, Google.Widevine.CDM.dll.8.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.8.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.8.dr	String found in binary or memory: https://24.hu
Source: sets.json.8.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.8.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.8.dr	String found in binary or memory: https://alice.tw
Source: sets.json.8.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.8.dr	String found in binary or memory: https://autobild.de
Source: sets.json.8.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.8.dr	String found in binary or memory: https://bild.de
Source: sets.json.8.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.8.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.8.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.8.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.8.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.8.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.8.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.8.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.8.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.8.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.8.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.8.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.8.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.8.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.8.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.8.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.8.dr	String found in binary or memory: https://chennien.com
Source: sets.json.8.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.8.dr	String found in binary or memory: https://clarosports.com
Source: manifest.json2.8.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: sets.json.8.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.8.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.8.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.8.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.8.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.8.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.8.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.8.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.8.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.8.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.8.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.8.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.8.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.8.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.8.dr	String found in binary or memory: https://css-load.com
Source: sets.json.8.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.8.dr	String found in binary or memory: https://deere.com
Source: sets.json.8.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.8.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.8.dr	String found in binary or memory: https://drimer.io
Source: sets.json.8.dr	String found in binary or memory: https://drimer.travel
Source: LICENSE.txt.8.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.8.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.8.dr	String found in binary or memory: https://een.be
Source: sets.json.8.dr	String found in binary or memory: https://efront.com
Source: sets.json.8.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.8.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.8.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.8.dr	String found in binary or memory: https://ella.sv
Source: sets.json.8.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.8.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.8.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.8.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.8.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.8.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.8.dr	String found in binary or memory: https://finn.no
Source: sets.json.8.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.8.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.8.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.8.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.8.dr	String found in binary or memory: https://github.com/easylist)
Source: sets.json.8.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.8.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.8.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.8.dr	String found in binary or memory: https://grid.id
Source: sets.json.8.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.8.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.8.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.8.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.8.dr	String found in binary or memory: https://hapara.com
Source: sets.json.8.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.8.dr	String found in binary or memory: https://hc1.com
Source: sets.json.8.dr	String found in binary or memory: https://hc1.global
Source: sets.json.8.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.8.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.8.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.8.dr	String found in binary or memory: https://hearty.app
Source: sets.json.8.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.8.dr	String found in binary or memory: https://hearty.me
Source: sets.json.8.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.8.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.8.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.8.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.8.dr	String found in binary or memory: https://hj.rs
Source: sets.json.8.dr	String found in binary or memory: https://hjck.com
Source: sets.json.8.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.8.dr	String found in binary or memory: https://html-load.com
Source: sets.json.8.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.8.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.8.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.8.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.8.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.8.dr	String found in binary or memory: https://img-load.com
Source: sets.json.8.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.8.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.8.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.8.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.8.dr	String found in binary or memory: https://interia.pl
Source: sets.json.8.dr	String found in binary or memory: https://intoday.in
Source: sets.json.8.dr	String found in binary or memory: https://iolam.it
Source: sets.json.8.dr	String found in binary or memory: https://ishares.com
Source: sets.json.8.dr	String found in binary or memory: https://jagran.com
Source: sets.json.8.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.8.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.8.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.8.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.8.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.8.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.8.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.8.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.8.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.8.dr	String found in binary or memory: https://kompas.com
Source: sets.json.8.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.8.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.8.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.8.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.8.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.8.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.8.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.8.dr	String found in binary or memory: https://libero.it
Source: sets.json.8.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.8.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.8.dr	String found in binary or memory: https://livechat.com
Source: sets.json.8.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.8.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.8.dr	String found in binary or memory: https://livemint.com
Source: sets.json.8.dr	String found in binary or memory: https://max.auto
Source: sets.json.8.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.8.dr	String found in binary or memory: https://meo.pt
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.8.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.8.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.8.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.8.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.8.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.8.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.8.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.8.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.8.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.8.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.8.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.8.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.8.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.8.dr	String found in binary or memory: https://money.pl
Source: sets.json.8.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.8.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.8.dr	String found in binary or memory: https://nacion.com
Source: sets.json.8.dr	String found in binary or memory: https://naukri.com
Source: sets.json.8.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.8.dr	String found in binary or memory: https://nien.co
Source: sets.json.8.dr	String found in binary or memory: https://nien.com
Source: sets.json.8.dr	String found in binary or memory: https://nien.org
Source: sets.json.8.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.8.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.8.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.8.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.8.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.8.dr	String found in binary or memory: https://o2.pl
Source: sets.json.8.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.8.dr	String found in binary or memory: https://onet.pl
Source: sets.json.8.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.8.dr	String found in binary or memory: https://p106.net
Source: sets.json.8.dr	String found in binary or memory: https://p24.hu
Source: sets.json.8.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.8.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.8.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.8.dr	String found in binary or memory: https://player.pl
Source: sets.json.8.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.8.dr	String found in binary or memory: https://poalim.site
Source: sets.json.8.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.8.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.8.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.8.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.8.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.8.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.8.dr	String found in binary or memory: https://radio1.be
Source: sets.json.8.dr	String found in binary or memory: https://radio2.be
Source: sets.json.8.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.8.dr	String found in binary or memory: https://repid.org
Source: sets.json.8.dr	String found in binary or memory: https://reshim.org
Source: sets.json.8.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.8.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.8.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.8.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.8.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.8.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.8.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.8.dr	String found in binary or memory: https://samayam.com
Source: sets.json.8.dr	String found in binary or memory: https://sapo.io
Source: sets.json.8.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.8.dr	String found in binary or memory: https://shock.co
Source: sets.json.8.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.8.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.8.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.8.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.8.dr	String found in binary or memory: https://songshare.com
Source: sets.json.8.dr	String found in binary or memory: https://songstats.com
Source: sets.json.8.dr	String found in binary or memory: https://sporza.be
Source: sets.json.8.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.8.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.8.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.8.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.8.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.8.dr	String found in binary or memory: https://stripe.com
Source: sets.json.8.dr	String found in binary or memory: https://stripe.network
Source: sets.json.8.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.8.dr	String found in binary or memory: https://supereva.it
Source: sets.json.8.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.8.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.8.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.8.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.8.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.8.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.8.dr	String found in binary or memory: https://text.com
Source: sets.json.8.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.8.dr	String found in binary or memory: https://the42.ie
Source: sets.json.8.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.8.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.8.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.8.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.8.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.8.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.8.dr	String found in binary or memory: https://top.pl
Source: sets.json.8.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.8.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.8.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.8.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.8.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.8.dr	String found in binary or memory: https://tvid.in
Source: sets.json.8.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.8.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.8.dr	String found in binary or memory: https://unotv.com
Source: sets.json.8.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.8.dr	String found in binary or memory: https://vrt.be
Source: sets.json.8.dr	String found in binary or memory: https://vwo.com
Source: sets.json.8.dr	String found in binary or memory: https://welt.de
Source: sets.json.8.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.8.dr	String found in binary or memory: https://wildix.com
Source: sets.json.8.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.8.dr	String found in binary or memory: https://wingify.com
Source: sets.json.8.dr	String found in binary or memory: https://wordle.at
Source: sets.json.8.dr	String found in binary or memory: https://wp.pl
Source: sets.json.8.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.8.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.8.dr	String found in binary or memory: https://ya.ru
Source: sets.json.8.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.8.dr	String found in binary or memory: https://zalo.me
Source: sets.json.8.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.8.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53679
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53681
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53680
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934

Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:50013 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll.sig	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\keys.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_493211379	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_493211379\ssl_error_assistant.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_493211379\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_493211379\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_493211379\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_493211379\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1293610195	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1293610195\download_file_types.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1293610195\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1293610195\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1293610195\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1293610195\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3720_169411573

Jump to behavior

Source: Google.Widevine.CDM.dll.8.dr	Static PE information: Number of sections : 12 > 10
Source: widevinecdm.dll.8.dr	Static PE information: Number of sections : 13 > 10

Source: classification engine

Classification label: clean7.winXLSX@33/46@8/8

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\Desktop\~$Mortgage Calculator and Comparator.xlsx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{25B010DC-BB47-4B16-BA01-3B6973B00968} - OProcSessId.dat

Jump to behavior

Source: Mortgage Calculator and Comparator.xlsx	OLE indicator, Workbook stream: true
Source: E9350000.0.dr	OLE indicator, Workbook stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2016,i,1178374307907939946,2446228775624378766,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.excelworks.co.uk/"
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\Mortgage Calculator and Comparator.xlsx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2016,i,1178374307907939946,2446228775624378766,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{88d96a0f-f192-11d4-a65f-0040963251e5}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet4.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet2.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing8.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing7.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/drawing4.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing5.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing6.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/drawing5.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet3.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet4.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet5.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/_rels/drawing2.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/_rels/drawing3.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/_rels/drawing4.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/_rels/drawing5.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet11.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet10.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet6.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet7.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet8.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet9.xml.rels
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing4.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/drawing2.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing2.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet11.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet9.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet5.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet6.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/vmlDrawing3.vml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet10.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/drawings/drawing3.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet8.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/worksheets/sheet7.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp2.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments3.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings2.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp1.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments1.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments6.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings4.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings7.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments5.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp4.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp3.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings6.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments4.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings8.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments2.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp5.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings5.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings11.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings10.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments8.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings3.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/printerSettings/printerSettings9.bin
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/comments7.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp6.xml
Source: Mortgage Calculator and Comparator.xlsx	Initial sample: OLE zip file path = xl/calcChain.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet4.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet5.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet6.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet7.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet8.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet10.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet11.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet6.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet7.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/drawing2.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet9.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet10.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet11.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing2.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/_rels/drawing2.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/_rels/drawing3.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/drawing3.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing3.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/_rels/drawing4.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/_rels/drawing5.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing4.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet8.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/drawing4.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing5.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/sheet9.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing6.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/drawing5.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing7.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/drawings/vmlDrawing8.vml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet2.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet3.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet4.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet5.xml.rels
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings2.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp1.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp2.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments1.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings3.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments2.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings4.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments3.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings5.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments4.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings6.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings7.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments5.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp5.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp6.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments7.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings9.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments6.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp4.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/comments8.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings10.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings11.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/printerSettings/printerSettings8.bin
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/calcChain.xml
Source: E9350000.0.dr	Initial sample: OLE zip file path = xl/ctrlProps/ctrlProp3.xml

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.8.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.8.dr

Source: Mortgage Calculator and Comparator.xlsx

Initial sample: OLE indicators vbamacros = False

Source: Google.Widevine.CDM.dll.8.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.8.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.8.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.8.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.8.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.8.dr	Static PE information: section name: .00cfg
Source: widevinecdm.dll.8.dr	Static PE information: section name: .gxfg
Source: widevinecdm.dll.8.dr	Static PE information: section name: .retplne
Source: widevinecdm.dll.8.dr	Static PE information: section name: .rodata
Source: widevinecdm.dll.8.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.8.dr	Static PE information: section name: malloc_h

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\Google.Widevine.CDM.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\Google.Widevine.CDM.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\LICENSE.txt

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 1847			Jump to behavior
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 8072			Jump to behavior

Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	22 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	4 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Process Injection	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	6 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	1 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll	0%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\Google.Widevine.CDM.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://blackrock.com	0%	URL Reputation	safe
https://idbs-eworkbook.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
www.excelworks.co.uk	217.160.0.56	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.excelworks.co.uk/favicon.ico	false		unknown
http://www.excelworks.co.uk/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.8.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://easylist.to/)	LICENSE.txt.8.dr	false		unknown
https://reshim.org	sets.json.8.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.8.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.8.dr	false		unknown
https://zdrowietvn.pl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.8.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.8.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.8.dr	false		unknown
https://p106.net	sets.json.8.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.8.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.8.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.8.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.8.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.8.dr	false		unknown
https://mercadopago.com.pe	sets.json.8.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.8.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.8.dr	false		unknown
https://mightytext.net	sets.json.8.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.8.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.8.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.8.dr	false		unknown
https://interia.pl	sets.json.8.dr	false		unknown
https://bonvivir.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.8.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.8.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.8.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.8.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.8.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.8.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.8.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.8.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.8.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.8.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.8.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.8.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.8.dr	false		unknown
https://commentcamarche.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.8.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.8.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.8.dr	false		unknown
https://mercadolivre.com.br	sets.json.8.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.8.dr	false		unknown
https://salemovefinancial.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.8.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.8.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.8.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.8.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.8.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.8.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.8.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://blackrock.com	sets.json.8.dr	false	URL Reputation: safe	unknown
https://idbs-eworkbook.com	sets.json.8.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
217.160.0.56	www.excelworks.co.uk	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5
192.168.2.23
192.168.2.13

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541255
Start date and time:	2024-10-24 16:16:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 13m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	Mortgage Calculator and Comparator.xlsx
Detection:	CLEAN
Classification:	clean7.winXLSX@33/46@8/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: http://www.excelworks.co.uk/ Scroll down Close Viewer Override analysis time to -15649.8875 for current running targets taking high CPU consumption Override analysis time to -31299.775 for current running targets taking high CPU consumption Override analysis time to -62599.55 for current running targets taking high CPU consumption Override analysis time to -125199.1 for current running targets taking high CPU consumption Override analysis time to -250398.2 for current running targets taking high CPU consumption Override analysis time to -500796.4 for current running targets taking high CPU consumption Override analysis time to -1001592.8 for current running targets taking high CPU consumption Override analysis time to -2003185.6 for current running targets taking high CPU consumption Override analysis time to -4006371.2 for current running targets taking high CPU consumption Override analysis time to -8012742.40000001 for current running targets taking high CPU consumption Override analysis time to -16025484.8 for current running targets taking high CPU consumption Override analysis time to -32050969.6 for current running targets taking high CPU consumption Override analysis time to -64101939.2 for current running targets taking high CPU consumption Override analysis time to -128203878.4 for current running targets taking high CPU consumption

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.28.46, 52.109.28.47, 52.113.194.132, 184.28.90.27, 93.184.221.240, 192.229.221.95, 20.42.65.90, 142.250.185.67, 142.250.185.206, 142.250.110.84, 34.104.35.123, 142.250.74.206, 172.217.16.206, 142.250.186.163, 52.109.32.97, 20.189.173.16, 142.250.185.78, 20.42.65.94, 142.250.186.35, 142.250.185.195, 172.217.18.3
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, onedscolprdeus14.eastus.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, mobile.events.data.microsoft.com, clients2.google.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, wu-b-net.trafficmanager.net, www.google-analytics.com, ecs.office.com, fs.microsoft.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, uks-azsc-000.roaming.officeapps.live.com, edgedl.me.gvt1.com, s-0005.s-msedge.net, ecs.office.trafficmanager.net, clients.l.google.com, europe.configsvc1.live.com.akadns.net, mobile.events.data.trafficmanager.net, otelrules.afd.azureedge.net, eur.roaming1.live.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, wu.azureedge.net, ecs-office.s-0005.s-msedge.net, roaming.officeapp
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Mortgage Calculator and Comparator.xlsx

Simulations

Behavior and APIs

Time	Type	Description
10:17:45	API Interceptor	38808479x Sleep call for process: splwow64.exe modified

LLM Input / Output

Input	Output
URL: Office document Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "unknown", "text_input_field_labels": [ "Financial Summary", "Affordability Calculator", "Payment Calculator", "Deal Comparator" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://www.excelworks.co.uk/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Visual Basic for Applications", "prominent_button_name": "unknown", "text_input_field_labels": [ "email, briefly stating what your issue is together with any attachments that help clarify what you want - the clearer your description the easier it is for me to assess your issue and come up with a time & cost frame." ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: Office document Model: claude-3-haiku-20240307	```json { "brands": [ "Excel Works Ltd" ] }
	```json { "brands": [ "Excel Works Ltd" ] }
URL: http://www.excelworks.co.uk/ Model: claude-3-haiku-20240307	```json { "brands": [ "Excel Works Ltd" ] }
	```json { "brands": [ "Excel Works Ltd" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	https://t.ly/8Lgfk	Get hash	malicious	Unknown	Browse
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	ATT25322.html	Get hash	malicious	Unknown	Browse
	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL/	Get hash	malicious	Unknown	Browse
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse
	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse
	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL/	Get hash	malicious	Unknown	Browse
	setup.msi	Get hash	malicious	Unknown	Browse
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse
	Meridian Group Inc - Contact Submission (70.2 KB)	Get hash	malicious	Unknown	Browse
217.160.0.56	PO# ROSIT#U00a0MR2309040.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.unterfischbach.com/6iog/?qbZ=9GwbkIsSBcxqdCGx4V2P4L86B2RQt1YLuqusKEezRQ82mkvqRbBX2jUTYE1mBbWLq5HN3ytTpnBBQkt3Rw32b4n0XuOroJew8DGQpthx+Oq0fzDwRJk5SFY=&WfG=DLQHsrZ8zZFDr2H
	PO21112022.exe	Get hash	malicious	FormBook	Browse	www.boursemastery.com/th47/?S6AlhHl=F8N/T72h+C1eE1iqYoPNMhrhjfzSwEJjyEOG5FSzDP4U9IEK80vAv75vUH5Duv6r+msK&5jD=m48DX2
	Payment Advice_04011021.exe	Get hash	malicious	FormBook	Browse	www.lew.solar/anab/?W48DrXC=sq1sfpG6IxEHtuNva4lfVxfAwSDSyb7H+Y4/Z10TYnRXz3ZA0fZznsu3sNh0PaOUrfx7&i0GHN=2dQXcz00dNl
13.107.253.45	https://t.ly/8Lgfk	Get hash	malicious	Unknown	Browse
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	From.S03E06.1080p.WEB.H264-SuccessfulCrab.mkv.zip	Get hash	malicious	Xmrig	Browse
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse
	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse
	https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d	Get hash	malicious	HTMLPhisher	Browse
	attachment(1).eml	Get hash	malicious	Unknown	Browse
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse
	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.W32.MSIL_Kryptik.KMZ.gen.Eldorado.27390.3879.exe	Get hash	malicious	Remcos	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	13.107.246.45
	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://tarah.com.sa/reee	Get hash	malicious	Unknown	Browse	13.107.246.45
	RTGS_UCB_DCCB_docx.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
s-part-0017.t-0009.fb-t-msedge.net	https://t.ly/8Lgfk	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45
	Szacunek IMP29575 za eksport z ostatniego kwartalu.vbs	Get hash	malicious	GuLoader	Browse	13.107.253.45
	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL/	Get hash	malicious	Unknown	Browse	13.107.253.45
	From.S03E06.1080p.WEB.H264-SuccessfulCrab.mkv.zip	Get hash	malicious	Xmrig	Browse	13.107.253.45
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	13.107.253.45
	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	attachment(1).eml	Get hash	malicious	Unknown	Browse	13.107.253.45
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
s-part-0044.t-0009.fb-t-msedge.net	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	13.107.253.72
	https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://email.email.pandadoc.net/c/eJxUkE9r4zwQxj-NdUuQR5ItHXQobfwG3rLQsmHbXspIGjeqE8m1FYfm0y-B7f65DcP8ht_zBOsa4XrNQvanI6XyGoPN-f7_7ilGN8iYdk8Pn-dxt_vOyNYtmMZwDpztLRpXK45GaGy9C943vK2NJgTDG-WQRQscZM1B1AJaztfS904pGYLuOTQtVZLTEeNhPWIKGLJfJyoszq9lQk_oDmTLdCJ2sPtSxrkSNxV0FXQ4jn8Qn48VdF_6FXQLVKIreaBUiTvSzgiJNQeJqLDhSoJpBAanJYFWrZO1kb6uRMdSLrGPHkvM6VqDaxuBBtpVCyBWEkW9wkbTCsko1-galQ4sT2-Y4uU39N85y5jEfDMn83C50P6beDlv2WTDe040V5K702Ggj9NhvKqziZY4_2J_iM3H6W67XV7Uop9j2dyq0D-yYr_S_TWuCk5v9M9mvl4sFtg5T8M8oqfrU_W4od1nvwdHIdy798HfDs_6ZwAAAP__1K2kLg	Get hash	malicious	Unknown	Browse	13.107.253.72
	SecuriteInfo.com.W32.MSIL_Kryptik.KMZ.gen.Eldorado.27390.3879.exe	Get hash	malicious	Remcos	Browse	13.107.253.72
	https://t.co/JJxL0428u4	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://msftexperience.qualtrics.com/jfe/form/SV_b1PzoUF1L5qlw1g?Q_DL=Lzn5LkBOak79ueP_b1PzoUF1L5qlw1g_CGC_Xg3gxZQzDMyhGCO&Q_CHL=email&Q_PopulateResponse=%7B%22QID1%22:%221%22%7D&Q_PopulateValidate=1	Get hash	malicious	Unknown	Browse	13.107.253.72
	Distribuciones Enelca Ja#U00e9n, S.L. PEDIDO 456799.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://t.ly/8Lgfk	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45
	keldRUiaay.elf	Get hash	malicious	Mirai	Browse	168.63.4.23
	ATT25322.html	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse	13.107.253.72
	setup.msi	Get hash	malicious	Unknown	Browse	94.245.104.56
	From.S03E06.1080p.WEB.H264-SuccessfulCrab.mkv.zip	Get hash	malicious	Xmrig	Browse	13.107.253.45
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	52.108.11.12
	Meridian Group Inc - Contact Submission (70.2 KB)	Get hash	malicious	Unknown	Browse	104.47.56.156
ONEANDONE-ASBrauerstrasse48DE	mm.exe	Get hash	malicious	Unknown	Browse	217.160.0.220
	Order.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	217.160.0.231
	Adeleidae.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	213.165.67.102
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	74.208.140.2
	PO NAHK22012FA000000.docx	Get hash	malicious	Unknown	Browse	62.151.179.85
	LlbpXphTu9.exe	Get hash	malicious	Unknown	Browse	217.160.0.132
	derstand.doc	Get hash	malicious	Unknown	Browse	62.151.179.85
	feelnicewithgreatthingsgreatdayscomingforgreat.hta	Get hash	malicious	Cobalt Strike	Browse	62.151.179.85
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	212.227.7.107
	Sprawl.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	213.165.67.102

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	ATT25322.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	Fa1QSXjTZD.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://linkednnn.weebly.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	Douglas County Government.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://email.email.pandadoc.net/c/eJxUkE9r4zwQxj-NdUuQR5ItHXQobfwG3rLQsmHbXspIGjeqE8m1FYfm0y-B7f65DcP8ht_zBOsa4XrNQvanI6XyGoPN-f7_7ilGN8iYdk8Pn-dxt_vOyNYtmMZwDpztLRpXK45GaGy9C943vK2NJgTDG-WQRQscZM1B1AJaztfS904pGYLuOTQtVZLTEeNhPWIKGLJfJyoszq9lQk_oDmTLdCJ2sPtSxrkSNxV0FXQ4jn8Qn48VdF_6FXQLVKIreaBUiTvSzgiJNQeJqLDhSoJpBAanJYFWrZO1kb6uRMdSLrGPHkvM6VqDaxuBBtpVCyBWEkW9wkbTCsko1-galQ4sT2-Y4uU39N85y5jEfDMn83C50P6beDlv2WTDe040V5K702Ggj9NhvKqziZY4_2J_iM3H6W67XV7Uop9j2dyq0D-yYr_S_TWuCk5v9M9mvl4sFtg5T8M8oqfrU_W4od1nvwdHIdy798HfDs_6ZwAAAP__1K2kLg	Get hash	malicious	Unknown	Browse	23.1.237.91
	juwXcVX5AK.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	ATT25322.html	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	https://app.pandadoc.com/document/v2?token=69b8ae0059c2551a9a27ed1b65653c1a0b5ee1ff	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL/	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	Meridian Group Inc - Contact Submission (70.2 KB)	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d	Get hash	malicious	HTMLPhisher	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	https://email.email.pandadoc.net/c/eJxUkE9r4zwQxj-NdUuQR5ItHXQobfwG3rLQsmHbXspIGjeqE8m1FYfm0y-B7f65DcP8ht_zBOsa4XrNQvanI6XyGoPN-f7_7ilGN8iYdk8Pn-dxt_vOyNYtmMZwDpztLRpXK45GaGy9C943vK2NJgTDG-WQRQscZM1B1AJaztfS904pGYLuOTQtVZLTEeNhPWIKGLJfJyoszq9lQk_oDmTLdCJ2sPtSxrkSNxV0FXQ4jn8Qn48VdF_6FXQLVKIreaBUiTvSzgiJNQeJqLDhSoJpBAanJYFWrZO1kb6uRMdSLrGPHkvM6VqDaxuBBtpVCyBWEkW9wkbTCsko1-galQ4sT2-Y4uU39N85y5jEfDMn83C50P6beDlv2WTDe040V5K702Ggj9NhvKqziZY4_2J_iM3H6W67XV7Uop9j2dyq0D-yYr_S_TWuCk5v9M9mvl4sFtg5T8M8oqfrU_W4od1nvwdHIdy798HfDs_6ZwAAAP__1K2kLg	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse	20.190.160.20 13.107.253.72 20.12.23.50
	http://74.248.121.8/d/msdownload/update/software/defu/2024/10/updateplatform.amd64fre_d3f6f8300855e56b8ed00da6dac55a3c4cbf8c20.exe?cacheHostOrigin=au.download.windowsupdate.com	Get hash	malicious	Unknown	Browse	20.190.160.20 13.107.253.72 20.12.23.50
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	StudioDemo.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	5Setup.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	PO%20K22012FA[1].docx	Get hash	malicious	Unknown	Browse	13.107.253.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.253.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\Google.Widevine.CDM.dll	attachment(1).eml	Get hash	malicious	Unknown	Browse
	sample.pdf	Get hash	malicious	HtmlDropper	Browse
	Technical_Technical_Specifications_&_Data_for_Optimized_Process.html	Get hash	malicious	HTMLPhisher	Browse
	phishtest.html	Get hash	malicious	Unknown	Browse
	DRL-272112.htm	Get hash	malicious	Unknown	Browse
	ATT037484_Msg#189815.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Project_Proposal_Review_and_Approval13617.pdf	Get hash	malicious	Unknown	Browse
	ordine.pdf	Get hash	malicious	HtmlDropper	Browse
	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Get hash	malicious	Unknown	Browse
	View alert details #20GBQ4J.html	Get hash	malicious	HTMLPhisher	Browse
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll	DRL-272112.htm	Get hash	malicious	Unknown	Browse
	View alert details #20GBQ4J.html	Get hash	malicious	HTMLPhisher	Browse
	shelbycountytn.gov.pdf	Get hash	malicious	Unknown	Browse
	EPAYMENT_Receipt.html	Get hash	malicious	Unknown	Browse
	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse
	https://qrco.de/bfQgn5	Get hash	malicious	Unknown	Browse
	Inv_Doc_18#908.pdf	Get hash	malicious	Unknown	Browse
	http://www.revsharboomerang.com	Get hash	malicious	Unknown	Browse
	AMA - 375,545.04.htm	Get hash	malicious	Unknown	Browse
	ACH Payment Details_(Dcorbett)CQDM.html	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 4770 bytes, 1 file, at 0x2c +A "disallowedcert.stl", number 1, 1 datablock, 0x1 compression
Category:	dropped
Size (bytes):	4770
Entropy (8bit):	7.946747821604857
Encrypted:	false
SSDEEP:	96:9/nBu64pydcvOHRUfu0xK1bQYMRSRNoYmxYvk56sHMZhh4m:9/nBuP2cGxUfu6K1bpWJ6vfh4m
MD5:	1BFE591A4FE3D91B03CDF26EAACD8F89
SHA1:	719C37C320F518AC168C86723724891950911CEA
SHA-256:	9CF94355051BF0F4A45724CA20D1CC02F76371B963AB7D1E38BD8997737B13D8
SHA-512:	02F88DA4B610678C31664609BCFA9D61DB8D0B0617649981AF948F670F41A6207B4EC19FECCE7385A24E0C609CBBF3F2B79A8ACAF09A03C2C432CC4DCE75E9DB
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................O.................2Wqh .disallowedcert.stl....^K...CK.wTS...:.w.K'.C0T.....Bh.{....C.)......Y@...(..).R."E..D^6........u....\|f~3...o.3. ..SPK.k.o#...."{-.U..P........:..aPr.@.d......Dy.h.....)..:...!./\A.....A<I_<$...q.h..........'.....7....H...@`T..K.S.%...Y4..R.....`.....-....D...(..b..-c."...G.=.dx..S+..2.a.E....d.L...77J...c.[..@..iT&..^78..g....NW6.Ek..FY.F........cNt.O...R..........D...... k........J.y...z.d...;.9_t...].@....yw..}.x....d.t..`f\K..;\|.h.X...4/.;.xT......q>.0...<...3...X..L$.&.,b.....\V....\......G..O..@..H3.....t..J..).x.?.{[..G>.7...<...^Q..z..Gw9P..d....i].n%K}.z..2.Py...A..s...z..@...4..........4.....Y.d..._Z.5.s..fl.C..#.K{9^.E...k..z.Ma..G.(.....5g. ...}.t.#4....$;.,....S@fs....k......u .^2.#_...I........;.......w..P...UCY...$;.S._\|.x..dK...[i..q..^.l..A.?.....'N.. .L.l......m.*.+f#]............A.;.....Z..rIt....RW....Kr1e=8.=.z:Oi.z.d..r..C_......o...]j.N;.s....3@3.dgrv.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	338
Entropy (8bit):	3.1534223191058257
Encrypted:	false
SSDEEP:	6:kKtgloN+SkQlPlEGYRMY9z+s3Ql2DUevat:ekPlE99SCQl2DUevat
MD5:	1E36160D087CD55F54E288D2DEC1443D
SHA1:	C2D5DBAB3301503981257A578B8D25E3EF0AF4A7
SHA-256:	BAE060E7A008399730B28CCCE3675AC203A800C158C34CA8A037A4D090DE5D29
SHA-512:	27801FE20101C18F1348780B8C3659157233026C1530D888A0AA1AD87ECB12DEA4D9ACA454D9C4CFBB498827760EAE316564C934F308528EEEC34A9173F74E2C
Malicious:	false
Reputation:	low
Preview:	p...... .........v7..&..(....................................................... .........p.........$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".7.4.6.7.8.7.a.3.f.0.d.9.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	984
Entropy (8bit):	2.7129766688368195
Encrypted:	false
SSDEEP:	24:YIrNvpCHByFQLzLRwcftR/8AJp9WtAZRJ5poIHWyYuTxqp:YmbCHBTLzLmcL8AJtfJ52IHsuNi
MD5:	13FF9F12089A7CBEE9055638D519307A
SHA1:	629CDC11F71107F7D6E73FCCA12C1F2E07D673B5
SHA-256:	F8EF6F254D11B092889A4F6ECA888C78ADB031C8AC4EC954950EF4F5D36C6B8D
SHA-512:	45643D26FC98B0CA9A702F5068F15F6EDA1508DAD630614ABE6420714E88C9344D42665C008576AED52451E76ADD1DEA220C8AD020649D97E387F3F4F6092256
Malicious:	false
Preview:	3.7.4.6.3.7.6.,.1.1.9.6.3.7.8.,.1.7.8.8.6.5.8.,.2.5.5.0.5.0.8.8.,.1.2.5.,.1.1.9.,.3.0.0.4.9.2.6.8.,.3.7.4.6.2.5.9.,.3.7.4.6.2.6.5.,.1.2.2.3.4.3.4.,.3.7.4.6.2.5.8.,.;.1.2.2.0.7.7.9.,.3.2.9.4.5.8.7.9.9.,.3.7.4.6.3.7.8.,.6.3.6.4.3.3.4.,.3.0.1.5.3.7.2.1.,.2.3.7.1.6.5.1.,.6.5.4.0.2.1.5.,.2.4.6.0.9.2.5.8.,.4.0.6.9.3.5.8.2.,.1.0.4.9.5.2.3.4.,.6.3.6.4.3.1.8.,.3.0.1.2.3.4.6.6.,.2.7.1.5.3.4.9.7.,.6.3.7.1.6.9.4.,.8.7.4.7.0.1.5.3.,.5.9.2.2.3.4.2.3.,.5.7.9.9.9.6.6.1.,.1.5.6.1.9.5.8.,.6.3.0.6.3.0.9.9.,.2.7.3.6.0.0.9.5.,.5.8.4.2.5.8.6.0.,.6.3.6.4.3.3.7.,.6.1.7.0.7.3.0.7.,.6.3.6.4.3.3.0.,.6.3.6.4.3.3.1.,.6.7.4.8.3.9.6.1.4.,.3.3.7.9.1.6.2.,.4.7.3.8.2.9.4.8.,.1.6.5.7.4.5.3.,.1.0.6.9.5.5.2.,.1.6.5.7.4.5.2.,.5.2.9.1.0.0.0.0.,.1.3.5.2.5.8.6.,.1.3.5.2.5.8.7.,.1.7.7.1.6.5.7.,.1.0.2.3.8.6.4.,.1.0.2.3.6.3.8.,.6.3.7.1.6.9.5.,.4.8.1.9.5.5.3.8.,.1.4.6.1.9.5.3.,.6.3.6.4.3.3.2.,.3.2.0.5.9.2.7.6.7.,.3.1.4.1.5.9.1.0.,.3.7.4.6.3.7.9.,.3.7.4.6.3.6.9.,.3.1.4.1.5.9.2.0.,.1.9.8.4.4.3.5.,.6.1.7.0.7.3.0.5.,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E49F9D54.jpeg

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 285x20, components 3
Category:	dropped
Size (bytes):	5754
Entropy (8bit):	7.752258556512871
Encrypted:	false
SSDEEP:	96:BqEajngt+XuMzK1X8FYCMf/uB2ISJyAqv4wYFaAbC7QyQOatckbd3+b2VWx:URTd+MzK1s2HnuBS3qvXgaA+7QFt13i1
MD5:	65E74ADE0B727D8CC4EFCA29CECD730C
SHA1:	4B1455217F77A0F54D9E10004F2FF448C0A9C7D5
SHA-256:	825C97AA318F301B1A954891F38F70C7DED1B920A210567885E0FC5126367BA0
SHA-512:	AE0E34D05E9732183C7469BC34E336C63A567127105CB68D0E77716C5AFFD61B69AD832E80B59E39F76C763BB9F87E399F0681C948944F1CF90DCB00B015E760
Malicious:	false
Preview:	......JFIF.....d.d.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..G........O.......\|L..u....G....o.....y.....sb}....w......?.l.......i...&...O..6............M/.?.P.>"....k.....fK...k6z..<.?~.......}......t~......#.6......,..+\..W....i....cO..H...4..?....;..L.g^._........._kV.....({.=..V.........{}.T.v...:5..#.i.,H6G3...n....k...&...gO...a.....m/.......s=.sr..Imm...'\|.rH6>.........F..;..X.d..z..........xGG......Iu/.~.~...g....

C:\Users\user\AppData\Local\Temp\91FE7545.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	984
Entropy (8bit):	2.7129766688368195
Encrypted:	false
SSDEEP:	24:YIrNvpCHByFQLzLRwcftR/8AJp9WtAZRJ5poIHWyYuTxqp:YmbCHBTLzLmcL8AJtfJ52IHsuNi
MD5:	13FF9F12089A7CBEE9055638D519307A
SHA1:	629CDC11F71107F7D6E73FCCA12C1F2E07D673B5
SHA-256:	F8EF6F254D11B092889A4F6ECA888C78ADB031C8AC4EC954950EF4F5D36C6B8D
SHA-512:	45643D26FC98B0CA9A702F5068F15F6EDA1508DAD630614ABE6420714E88C9344D42665C008576AED52451E76ADD1DEA220C8AD020649D97E387F3F4F6092256
Malicious:	false
Preview:	3.7.4.6.3.7.6.,.1.1.9.6.3.7.8.,.1.7.8.8.6.5.8.,.2.5.5.0.5.0.8.8.,.1.2.5.,.1.1.9.,.3.0.0.4.9.2.6.8.,.3.7.4.6.2.5.9.,.3.7.4.6.2.6.5.,.1.2.2.3.4.3.4.,.3.7.4.6.2.5.8.,.;.1.2.2.0.7.7.9.,.3.2.9.4.5.8.7.9.9.,.3.7.4.6.3.7.8.,.6.3.6.4.3.3.4.,.3.0.1.5.3.7.2.1.,.2.3.7.1.6.5.1.,.6.5.4.0.2.1.5.,.2.4.6.0.9.2.5.8.,.4.0.6.9.3.5.8.2.,.1.0.4.9.5.2.3.4.,.6.3.6.4.3.1.8.,.3.0.1.2.3.4.6.6.,.2.7.1.5.3.4.9.7.,.6.3.7.1.6.9.4.,.8.7.4.7.0.1.5.3.,.5.9.2.2.3.4.2.3.,.5.7.9.9.9.6.6.1.,.1.5.6.1.9.5.8.,.6.3.0.6.3.0.9.9.,.2.7.3.6.0.0.9.5.,.5.8.4.2.5.8.6.0.,.6.3.6.4.3.3.7.,.6.1.7.0.7.3.0.7.,.6.3.6.4.3.3.0.,.6.3.6.4.3.3.1.,.6.7.4.8.3.9.6.1.4.,.3.3.7.9.1.6.2.,.4.7.3.8.2.9.4.8.,.1.6.5.7.4.5.3.,.1.0.6.9.5.5.2.,.1.6.5.7.4.5.2.,.5.2.9.1.0.0.0.0.,.1.3.5.2.5.8.6.,.1.3.5.2.5.8.7.,.1.7.7.1.6.5.7.,.1.0.2.3.8.6.4.,.1.0.2.3.6.3.8.,.6.3.7.1.6.9.5.,.4.8.1.9.5.5.3.8.,.1.4.6.1.9.5.3.,.6.3.6.4.3.3.2.,.3.2.0.5.9.2.7.6.7.,.3.1.4.1.5.9.1.0.,.3.7.4.6.3.7.9.,.3.7.4.6.3.6.9.,.3.1.4.1.5.9.2.0.,.1.9.8.4.4.3.5.,.6.1.7.0.7.3.0.5.,.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 13:18:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9741048059368933
Encrypted:	false
SSDEEP:	48:8JdtT1tWHROidAKZdA19ehwiZUklqehJy+3:8xzBCy
MD5:	69302CF684BE13E95EB6172314A737A6
SHA1:	3C536C6AEF15283F86E183473EC7321C58E7EC7E
SHA-256:	9E05BEB94331C7E8F31E54FBF61A4F14F166872510EC5EA784F5804F6AAB4DDF
SHA-512:	38D89FE906713C0D5EB2878FA952AB30B0D8B8BF2693B1FF779F0AB56180B0496EAB47C0A8841EF710B188CC623D3AD69495EC09A46FA902AE4299CE925E11FD
Malicious:	false
Preview:	L..................F.@.. ...$+.,.........&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY6r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYWr....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYWr....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYWr..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXYXr...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 13:18:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.981743184579513
Encrypted:	false
SSDEEP:	48:8/dtT1tWHROidAKZdA1weh/iZUkAQkqehyy+2:8fzz9Qjy
MD5:	054799FED12CA729F1C4931825FF28E5
SHA1:	4C17113742CED812E14D8E45954854C501DB501C
SHA-256:	25C61CB7F03929D2B2DA2D4FCBD031281A0D583E420735D56B6E87A82B81825E
SHA-512:	649FFB01645F76BB48E14397DB7340A19BD12EAC28F153377615581087FEC04D213638BC258D59812ADC3D85A274D80103B525164D7BC378E222DFF445575706
Malicious:	false
Preview:	L..................F.@.. ...$+.,....tD...&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY6r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYWr....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYWr....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYWr..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXYXr...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00155543791749
Encrypted:	false
SSDEEP:	48:8x7dtT1tsHROidAKZdA14tseh7sFiZUkmgqeh7sky+BX:8xDz1nmy
MD5:	AED5EE3C73B58E3FAE4B603262D1E090
SHA1:	C4B7EAD07EBF66A624FFE094705E9FFDBF7305BA
SHA-256:	D5266E340D1CDD33C9881BAAD308EE380EB8B84622F85644FBE9010F11DE4A8C
SHA-512:	D592B0DEAC02FBFCBC24D1C3BB544A37DAB22CE6C102AC9D3D78EC0883188704F22AA21D47AE0ECAC19FA211511B4DB1B74FF9DFF05B01D263A63559A655397C
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY6r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYWr....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYWr....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYWr..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 13:18:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.988318986467082
Encrypted:	false
SSDEEP:	48:8xdtT1tWHROidAKZdA1vehDiZUkwqeh+y+R:8Jzw8y
MD5:	BE50248FB4CDF7BE002E18AB2B66CEF9
SHA1:	D9DD93191C5C37824167E3A75FA9974ED5D1A8BA
SHA-256:	E455ABFE7F75C380B960BCB19F5577DD3FF267D53E267588AA2182E5EC77BEC8
SHA-512:	CADBC63D08FD06F2205B2993E3A179BD9550881D1EDDF232132D966F4F16E76515B74096031468F2D651387E17DFBD6B978F9CF9ABD5FA3F4B024A27463294D0
Malicious:	false
Preview:	L..................F.@.. ...$+.,....,....&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY6r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYWr....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYWr....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYWr..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXYXr...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 13:18:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9735139013790883
Encrypted:	false
SSDEEP:	48:8bdtT1tWHROidAKZdA1hehBiZUk1W1qeh4y+C:8jzw9Yy
MD5:	79E0464E58FEBD9260DEAAD126D63372
SHA1:	F07E1BEC0E9359B3468CADE9938CD871DF86207F
SHA-256:	D00CAD69D26DD7DA7C323878D870A799F63C67375B8575F578B84E92AC511370
SHA-512:	21D02048639ED1A3ABF7A47D7023E0206EDD8284915C7406788F5A7F57358830826D112C57148D8924A4199EA90ECA049110F4FB644EA97F8A69380BA91F6D0A
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....e...&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY6r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYWr....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYWr....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYWr..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXYXr...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 13:18:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9880423397826577
Encrypted:	false
SSDEEP:	48:8udtT1tWHROidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8Iz+T/TbxWOvTbmy7T
MD5:	87E557AB7BBBC77D41F632C3CC925C21
SHA1:	893E6E4AC8C600455622BCC8C0ACFFDEAC8866A3
SHA-256:	D5D42E44FAEBA773168C575719777BFECD96A2BA68AE3FD7BC5DE5707BD3F254
SHA-512:	603EF01E285BD2BBA5400DC0B27DD63B142AD32B2B31E434A68335C27554DC8A86F305ACD8BEC0E5E947D3B984C38361BFFD4CCE1AC975CAF53435D4AF51E900
Malicious:	false
Preview:	L..................F.@.. ...$+.,........&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY6r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYWr....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYWr....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYWr..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXYXr...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\E9350000

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	212404
Entropy (8bit):	7.936438290499936
Encrypted:	false
SSDEEP:	3072:nqcHdz63FaN2BYgNOw+3k7q0o85cT62y4nEAJ6dtJbuW2TMiCrcZHyFdp1E:nqcHdW3sN2u+ofwAZlTMT8HyzE
MD5:	4218C73975982C17B5D0DAEAB7253EC5
SHA1:	5C90CF98ABA598D44C2DE1B62FA7CF9D89093393
SHA-256:	059370E5E965A11FFBB3F4D80B0DC538C13FAC0F2DB246E2CEBA4871DCDA412D
SHA-512:	A00CD1E78A5FB3BE89D3ECD0BF47C92B1A8EA9F84269F0DC7BA950F576ED709E5178DCF5BE2CEE1269B0BE061DF8735598370F21800BDAA6584F035976FAB3F2
Malicious:	false
Preview:	PK..........!....(\...........[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................X.n.0....?.....M..r.I{l.$...ZK.). .....d9.\?(.@t.%S.....NoV.L.`..#.tL.P\.B.....stE.....2..Gnf.?L...\....H......Rm@..\.y...5./X..b<..\+..\|...w0g..'?V...P$..<WCe..#.g....w@Fz>..r.+..:c....L...h..{L.....b.TT5.f`....u#.*...&.W..>.\.X-q...8......@.}..%..k...{f./V.../....^..t].f.......~...$2.:.&pG.....y <.........o..q5.....c2....z.z..@.....0'^..%...Y...r.,...MJ.....'x....h{._.6PG...g...V.[m..^.d\...8.v

C:\Users\user\Desktop\E9350000:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\Desktop\Mortgage Calculator and Comparator.xlsx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	212404
Entropy (8bit):	7.936438290499936
Encrypted:	false
SSDEEP:	3072:nqcHdz63FaN2BYgNOw+3k7q0o85cT62y4nEAJ6dtJbuW2TMiCrcZHyFdp1E:nqcHdW3sN2u+ofwAZlTMT8HyzE
MD5:	4218C73975982C17B5D0DAEAB7253EC5
SHA1:	5C90CF98ABA598D44C2DE1B62FA7CF9D89093393
SHA-256:	059370E5E965A11FFBB3F4D80B0DC538C13FAC0F2DB246E2CEBA4871DCDA412D
SHA-512:	A00CD1E78A5FB3BE89D3ECD0BF47C92B1A8EA9F84269F0DC7BA950F576ED709E5178DCF5BE2CEE1269B0BE061DF8735598370F21800BDAA6584F035976FAB3F2
Malicious:	false
Preview:	PK..........!....(\...........[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................X.n.0....?.....M..r.I{l.$...ZK.). .....d9.\?(.@t.%S.....NoV.L.`..#.tL.P\.B.....stE.....2..Gnf.?L...\....H......Rm@..\.y...5./X..b<..\+..\|...w0g..'?V...P$..<WCe..#.g....w@Fz>..r.+..:c....L...h..{L.....b.TT5.f`....u#.*...&.W..>.\.X-q...8......@.}..%..k...{f./V.../....^..t].f.......~...$2.:.&pG.....y <.........o..q5.....c2....z.z..@.....0'^..%...Y...r.,...MJ.....'x....h{._.6PG...g...V.[m..^.d\...8.v

C:\Users\user\Desktop\~$Mortgage Calculator and Comparator.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:sYp5lFltt:sYp5Nv
MD5:	B77267835A6BEAC785C351BDE8E1A61C
SHA1:	FABD93A92989535D43233E3DB9C6579D8174740E
SHA-256:	3B222E766EADC8BC9A8A90AC32FA591F313545B7E8C5D481D378AE307FA798C3
SHA-512:	FFFCBA958E9BD56F284DA19592F124C48B013FCDA2FBE65B3EB38BB644C2B0C978E6DAE99EF213B054813C7212E119B09236A6FFF342D32E52C84DD26DE1E033
Malicious:	false
Preview:	.user ..a.l.f.o.n.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	473
Entropy (8bit):	4.388167319950301
Encrypted:	false
SSDEEP:	6:LOT6w+DmsDZrkrDxBYRgELGNB+cIMLohXOl0t1iKR/UFioWd9+iAt4jZMeLhJoUs:iwDtVEDsCDLeelyigqBjt4eK2f55
MD5:	F6719687BED7403612EAED0B191EB4A9
SHA1:	DD03919750E45507743BD089A659E8EFCEFA7AF1
SHA-256:	AFB514E4269594234B32C873BA2CD3CC8892E836861137B531A40A1232820C59
SHA-512:	DD14A7EAE05D90F35A055A5098D09CD2233D784F6AC228B5927925241689BFF828E573B7A90A5196BFDD7AAEECF00F5C94486AD9E3910CFB07475FCFBB7F0D56
Malicious:	false
Preview:	Google LLC and its affiliates ("Google") own all legal right, title and.interest in and to the content decryption module software ("Software") and.related documentation, including any intellectual property rights in the.Software. You may not use, modify, sell, or otherwise distribute the Software.without a separate license agreement with Google. The Software is not open.source software...If you are interested in licensing the Software, please contact.www.widevine.com.

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1550
Entropy (8bit):	5.9461543350675905
Encrypted:	false
SSDEEP:	48:p/hFkmoyMTI1jglp6NjkakKwk+R2VJAz5s:RhMka5adwTYQz5s
MD5:	98B310FC33843D771DA0089FA155EDB2
SHA1:	5690A43F43673B947EB4C433CB4F5488A287E29C
SHA-256:	28F09A4AF935D2894689CC00658D597257422CAFF20A01055EFD8E78AD5E829F
SHA-512:	E76830974EA54C94E857179CA0DA893E088034367CA5C33E71C1016B788E737D65AB49AD9A9E6FEB85385B963AF5C13DB0A91E3F3072AC91600E91A1CEA0AB6F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KnESAO6ts6E14P0aoVwC_yghkUn7_i9PCMh0NvK44eLJL04dv

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	19236784
Entropy (8bit):	7.70214269860876
Encrypted:	false
SSDEEP:	393216:FPRzXYeXFyjsrZuvpYl5SJIhw7PJeP9TZHZMaMq0Vrq8P:DFyjs0pYl1hwDJeVT7erq8P
MD5:	9D76604A452D6FDAD3CDAD64DBDD68A1
SHA1:	DC7E98AD3CF8D7BE84F6B3074158B7196356675B
SHA-256:	EB98FA2CFE142976B33FC3E15CF38A391F079E01CF61A82577B15107A98DEA02
SHA-512:	EDD0C26C0B1323344EB89F315876E9DEB460817FC7C52FAEDADAD34732797DAD0D73906F63F832E7C877A37DB4B2907C071748EDFAD81EA4009685385E9E9137
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: DRL-272112.htm, Detection: malicious, Browse Filename: View alert details #20GBQ4J.html, Detection: malicious, Browse Filename: shelbycountytn.gov.pdf, Detection: malicious, Browse Filename: EPAYMENT_Receipt.html, Detection: malicious, Browse Filename: Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: Inv_Doc_18#908.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AMA - 375,545.04.htm, Detection: malicious, Browse Filename: ACH Payment Details_(Dcorbett)CQDM.html, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Gf.........." ......o.........P.l......................................p].....c.%...`A..........................................!.......!...... ]......`[..$...f%..!...0].0:....!.8.....................!.(...`cp.@...........p.!..............................text.....o.......o................. ..`.rdata..x.....o.......o.............@..@.data...pv8...".......".............@....pdata...$...`[..&....#.............@..@.00cfg..0.....\.......$.............@..@.gxfg... (....\......$.............@..@.retplne......\.......%..................rodata.......\.......%............. ..`.tls..........\.......%.............@..._RDATA..\.....]...... %.............@..@malloc_h......]......"%............. ..`.rsrc........ ]......$%.............@..@.reloc..0:...0]..<...%.............@..B................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll.sig

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.572464059652219
Encrypted:	false
SSDEEP:	24:38H/VZn47VBRxgCUQuODHBJeriJ8yojUdnkLvXWgl0oHLrUXAokYH/o8j/bmspTh:38HdurRxHSOlAiqYoXWVDXJ/o8zbmsFh
MD5:	A19EC48B4B28F3AA9C32150DCA8C0E39
SHA1:	02981E40B643C2A987D47BF58F42B7F3CA5AAF07
SHA-256:	D363751B0EE48517DA1B56C17FFCD78DD57F25B092B09879667DB10338077621
SHA-512:	718A24E1FB45AB0FD3DB5A5C45B0E0061D9061D8615E2A8D6DB2150BF72267E96774094A6FC07A250D5BBBC5133A1CB635D8F7ADC5B1751FA99327FCE9555941
Malicious:	false
Preview:	....0...0...........6cd/+J.v{..B...0....H........0}1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1"0 ..U....widevine-codesign-root-ca0...171013173909Z..271011173909Z0y1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1.0...U....widevine-vmp-codesign0.."0....H.............0.........2F..8.e..-....$r...{^........0.%.HA...sA"D.q.=6...#.J.N.......&..k;.+...<xF.......B8.)S....o..\|Ci.F.A6....J.......Y..4..{.5u.9N...=...#.M..s.F!j.f%&ld.R...?!Ot@......#.f..O..[.V.p0y....+...S.].....M.=.9...>.. ........>.:....1tl.....`D/c..j..........0..0...U......L...cC.E..R.n...$.0...U.#..0....=..tW....!.B.#U).0...U....0.0...U........0...U.%..0...+.......0...+.....y........0....H.............g.."..[..t{.4~.,.G....4K.....(x$...} ....N..b\|d......h..u6?.L.(&.Oup...$!...4R. 5.-...s...K/..U[..[.+.sAX*.~...^0..ba>;.#....x...b.-1...E..l....S.n.a....)U .q..C>d:...<[..F5...7...[.-.l}.T Lc.X..Qf...z..:.Q..e.m

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9232676497295262
Encrypted:	false
SSDEEP:	3:SQTWAEVtGbSHaqHGDTzoARPkBDF:SQyANeayyTzTP6
MD5:	5BFBCC6E7AA3E9C1570C5C73F38FA8EA
SHA1:	497BAFA5658C6CE8C8010D12F104EEBEC7A1BAE2
SHA-256:	84470096167EA43C0880B39FE44B42F552014E4F85B66805C2935C542BA3CB8E
SHA-512:	41BBED6CC317FF190189D63D6D5910D30E23A5160E5FF5F635FF408AAB13452DA8174556D7120DB176701435A3329A93A7450583404D56C34A37B67F1A332EDC
Malicious:	false
Preview:	1.567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	4.774546324439748
Encrypted:	false
SSDEEP:	24:ulaihI11X1TRuRckckH3WoA0UNqLQxUNqmTxyNq+TA:C1hYl1uRfckHkseDA
MD5:	2FF237ADBC218A4934A8B361BCD3428E
SHA1:	EFAD279269D9372DCF9C65B8527792E2E9E6CA7D
SHA-256:	25A702DD5389CC7B077C6B4E06C1FAD9BDEA74A9C37453388986D093C277D827
SHA-512:	BAFD91699019AB756ADF13633B825D9D9BAE374CA146E8C05ABC70C931D491D421268A6E6549A8D284782898BC6EB99E3017FBE3A98E09CD3DFECAD19F95E542
Malicious:	false
Preview:	{. "manifest_version": 2,. "update_url": "https://clients2.google.com/service/update2/crx",. "name": "WidevineCdm",. "description": "Widevine Content Decryption Module",. "version": "4.10.2830.0",. "minimum_chrome_version": "68.0.3430.0",. "x-cdm-module-versions": "4",. "x-cdm-interface-versions": "10",. "x-cdm-host-versions": "10",. "x-cdm-codecs": "vp8,vp09,avc1,av01",. "x-cdm-persistent-license-support": true,. "x-cdm-supported-encryption-schemes": [. "cenc",. "cbcs". ],. "icons": {. "16": "imgs/icon-128x128.png",. "128": "imgs/icon-128x128.png". },. "platforms": [. {. "os": "win",. "arch": "x64",. "sub_package_path": "_platform_specific/win_x64/". },. {. "os": "win",. "arch": "x86",. "sub_package_path": "_platform_specific/win_x86/". },. {. "os": "win",. "arch": "arm64",. "sub_package_path": "_platform_specific/win_arm64/". }. ],. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74272
Entropy (8bit):	5.535436646838848
Encrypted:	false
SSDEEP:	1536:GB9Cdg51kGLmOSe1pEQHdPr4l0TmmJ2I7CwguaRZrgMQUavJX5vwKf:Sok1RLtb1ptdPrYk1J2IPguangMQ3X5P
MD5:	B23DD5B6ECCB460003EA37BA0F5E3730
SHA1:	FD444553CB7699F84CE7E5664232771673DCF67D
SHA-256:	7F7F432C27D97DEE184DCD3EA20F731674C008BE849C0136F9C5358E359F3EA9
SHA-512:	7E47BD172C4BD4C65F063A8FA3FB33ED47F29156EB20E42D4E8EA73C6F02526A30FFE907BE5B7C1406D4EAA71FBEC7C0D557C376DCCD0A1A961E2F61B3431181
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/."......0.8.@.R./plugins/cactus-ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana...........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/..........0.8.@.R./page-links-to/dist/new-tab.js........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^.2........0.8.@.R"cloudfront.net/js/common/invoke.js..........0.8

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.990179229242317
Encrypted:	false
SSDEEP:	24:pZRj/flTHYe1DxxpTkYbKCCojeT31zkaoX63wMHF48I31RwCCyqoX6kyKlklyJqw:p/h4YDxxlbKlTlkakgPLI3hCyqkwnlKD
MD5:	2FF08C4B4128F634CBBFEA0C1C44AA2E
SHA1:	45D11E57DDF29E843AC8545C7D06CDDB5DF3E962
SHA-256:	33B6F2ECD5FB7F9FAF538F29808716EFA337A653809943A8E4B5E450B734DA09
SHA-512:	14BD9E921E1DB9AC8720C1177897DB624292865D29B976ED9CCCEE572726D7D123A8F39E470987DF796AE0552861FBAE056CDB395F0CB8B0E699C28F5E221999
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"ifBoq-woYhqxB78EqRoo2fPRIEfkuykYMlD9kWeeG2QS6-R5YvGNJ9n5OljLXGjvK5U3MDFRLi-UCguxuUaoFjU_QeSCiOLxvDS5JHdk8Bbba8fCW6ZKnH_fvocQD8W7Hj0reH3gOPmD7sIraz8IvG86GRuGPqsxbgc_BRtOCa5KRgqaxfjt7tKlOtaUoO3_qsNlf_8F8k0tNZh131RRIEaXw53z3ZzGpWtgYC0u6s0JKag8l

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8568101737886993
Encrypted:	false
SSDEEP:	3:SWcgK7GtszDAAnHT:SWc97GWzDlnHT
MD5:	6DBEDE254AF8A23D6CB2ABAEA8D2E38F
SHA1:	A827D46FA5D53CB7B134F143CC15A30BA015ED21
SHA-256:	376ED55CD5AB45C0F7BAA1AF0AC2637C33DEA6D1D4683B729AE7CE764F70DAA1
SHA-512:	0F28FD8AF582C18ECCCC1321B94902501D31C4B6C1D11684780DED6217C14E1B313F58A644516F37AE69232F1C2861915337A4D84185E18124F40C629A50B7F9
Malicious:	false
Preview:	1.3651711652892acf34795b2c7e4d401ed2274c20e952f65cf52deeeef5bbf9b5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_117410516\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1KPYn:F6VlMZWuMt5SKPS1eY
MD5:	3448D97DA638C7EF0FBCA9B6949FFC8F
SHA1:	36D8434F26F0316FAB4627F7856FCA7291FE8ADF
SHA-256:	1700A11FD1E58367B450A41B2AE5FD26ECB5CDB459869C796C7DDE18F1D30F73
SHA-512:	9BF9055B2EF82BD1D2A1E94009FED2D3481FE2DC336D306FA0DB786658EFA5B72C9A9A214A829B9FCC4222476051871FF012009C64F09B9109072ABDF3DEF8CC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.51.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_468653211\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: attachment(1).eml, Detection: malicious, Browse Filename: sample.pdf, Detection: malicious, Browse Filename: Technical_Technical_Specifications_&_Data_for_Optimized_Process.html, Detection: malicious, Browse Filename: phishtest.html, Detection: malicious, Browse Filename: DRL-272112.htm, Detection: malicious, Browse Filename: ATT037484_Msg#189815.html, Detection: malicious, Browse Filename: Project_Proposal_Review_and_Approval13617.pdf, Detection: malicious, Browse Filename: ordine.pdf, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, Detection: malicious, Browse Filename: View alert details #20GBQ4J.html, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_680166997\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1865
Entropy (8bit):	6.002187808693378
Encrypted:	false
SSDEEP:	24:pZRj/flTULG22dVmdt2qNQMcRaoX96F1eK1BGpjBQghcoXZwjMx73w4vc:p/hUH2dAdtWPak6c5pSkawxLVvc
MD5:	F85CE0D2E1806C582954BD831378033E
SHA1:	584222C390C8E9D0B85574083B89BE48114B7F00
SHA-256:	E4FA2DED0327C43AA618CC751B8A8704CBEC33CDBC28E5FF49D536D58226E5BB
SHA-512:	08A9F6C42A774287A883A745ACF1A17327DF19493248C69D8497B6A5EE1A5E9310FB756A3C4C7665624929D4387BF365CAE5F6100AA873C04BFF2B56932BE4A8
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJMSUNFTlNFIiwicm9vdF9oYXNoIjoiUGIwc2tBVUxaUzFqWldTQnctV0hIRkltRlhVcExiZDlUcVkwR2ZHSHBWcyJ9LHsicGF0aCI6ImtleXMuanNvbiIsInJvb3RfaGFzaCI6IlR2TGVraUQyX3VCdDl5aDlYZFZST3hfVi01ZklaYUViZnZBczhxNHBqbXMifSx7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiSTc3VnlPdnFERGRrZ3pkTHJYdXZZenAtVXZQZ3BnazNIRkdPQnVaRnZhQSJ9XSwiZm9ybWF0IjoidHJlZWhhc2giLCJoYXNoX2Jsb2NrX3NpemUiOjQwOTZ9XSwiaXRlbV9pZCI6ImtpYWJoYWJqZGJramRwamJwaWdmb2RiZGptYmdsY29vIiwiaXRlbV92ZXJzaW9uIjoiMjAyNC4xMC4xMS4xIiwicHJvdG9jb2xfdmVyc2lvbiI6MX0","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"rI34430Mqa-tj3CBWGaM65yBUrAgUFc_poiZa1PmmwZy_8S1PPjJcTKAXt-I10CHBN9n7hJfg4LFTlfcRv_dib5mbGIB-N9Mq7RkoFminZgi0tz4AdN192wkghWiKh0b8ZBciaG-vh8yu25g95jrBRml6PbDtD-1PgRqGw4NexUGWjguIW2gnGtRZ4FE-BEPNYI8cifzHEZAoyUs0jJHMJN8vavFR76ngAOpjvTNke8su9XpGHRDud

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\keys.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7057
Entropy (8bit):	5.979533556811076
Encrypted:	false
SSDEEP:	96:UXq6pG2GE+ryg+BQJ+m0plhYvPuW+wkpTm+ozdswsDm4+uTagSfC3AQj+y:uNtGbraBQgm4lOvMwkoR9PuGs3gy
MD5:	052B398CC49648660AAFF778D897C6DE
SHA1:	D4FDD81F2EE4C8A4572AFFBFD1830A0C574A8715
SHA-256:	47EC07DDF9BBD0082B3A2DFEA39491090E73A09106945982E395A9F3CB6D88AE
SHA-512:	ED53D0804A2EF1BC779AF76AA39F5EB8CE2EDC7F301F365EEAA0CF5A9AB49F2A21A24F52DD0EB07C480078CE2DD03C7FBB088082AEA9B7CDD88A6482AE072037
Malicious:	false
Preview:	{"https://issuer.captchafox.com":{"PrivateStateTokenV1VOPRF":{"batchsize":1,"id":1,"keys":{"0":{"Y":"AAAAAQQiyE+SESbq7GU5rTx6tZO4tBOxljp+Oya2mU28O+YoALIyXlLLqnl/h5h95ExYSsOlmMIb8EdsJBTrCaDl/KIZSskrfMbZpjhShG0jwnbXojEHI9WaAxKLkX/A/DkyMEg=","expiry":"1734807628115000"},"1":{"Y":"AAAAAQRNtld+5LLBquS4bEJKJwlLw61tzIyqTNkvMVnUTu+YiphbdGrRCjeDTN9D3p1Tgpfmq0N/OKMBYWzDMEN8Km9p9s49c6N2ph4B1MV1m7Ogdj969MOsTw54Kc849oqDl8s=","expiry":"1734807628115000"},"2":{"Y":"AAAAAQSBWW003A3ORFURCZrWNnbEIH15yzk184DaLSebbGzRdyCYtAM1qhhVmXZyBtWTzh6Bfkk5rLPyE1xdQilofPBizF/QJsdaMU0GYhPW1sOU4xoKbmgd/XrnOoFqA2ETOuc=","expiry":"1734807628115000"},"3":{"Y":"AAAAAQSG/ftGdm5B6iwAmVsHt6s43xx3nRf/Vpx9GdeEt3jSTM8hHvyLE9FAEkinGjt4Fp5EjnkCdE96Cxz10nZJRrMApIrGhG5kAoDu4T8PjJPiFQFyHAOdTG7OJWi2NS/rl1A=","expiry":"1734807628115000"},"4":{"Y":"AAAAAQT36tqe550UP5A+4Eokt8iuPZEuWQc9cGJXd7zUCZzrsqtGu3PMcVbOj5DjC4W+yoyF3HqKOqdtiBWgcMsZOcyln/6jUKqf5tS9AoIHa9CC3kQB8ISQd3lhR5j+qWVY8ms=","expiry":"1734807628115000"},"5":{"Y":"AAAAAQQMjaLNCR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8890592795725096
Encrypted:	false
SSDEEP:	3:SlGXdRABAHlgvAwUoXExn:SMXMGHaUoUx
MD5:	F06BBDC2FFF07678F17AB2E13E5242F2
SHA1:	38267922774478D53BBDF6C58F1AB621F76AD147
SHA-256:	04F1C19701E9F79342896D68856EB04023679DB2638B1038472B8F1AD790BCC6
SHA-512:	6223822E0AFD58EB7C25C5B207E377964C5E07779779E8DE5B2703B46526C4868DF217AF95F80E7692305ED98F8350ED20673659106116D95F1332C6A3EF540F
Malicious:	false
Preview:	1.fbd0d7206f8650d442eb772a03839aabc778b0225aee04589ca8cdad2aa99cca

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_806731018\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.418776852063957
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFIPgS1kVmHvY:F6VlMyPgS1kVaY
MD5:	077DA41A01DDE0173EBBF70D3B7210E2
SHA1:	4B3C3DEEB9522CA4EF4E42EFCF63B2674F6A5C07
SHA-256:	23BED5C8EBEA0C376483374BAD7BAF633A7E52F3E0A609371C518E06E645BDA0
SHA-512:	2822D02E2B3C6306E6D71FA62E7F472B4C3CDF0CBE499B70AC60A0A50E547ED47C394D7DE88BBEF2E6015920442B9D30CBC0D6869D154E02EC251712F918DEEC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "trustToken",. "version": "2024.10.11.1".}

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 46274
Category:	dropped
Size (bytes):	17168
Entropy (8bit):	7.989364903563379
Encrypted:	false
SSDEEP:	384:MGx2krkLfYLu1yss2Hi3o0AkVAAdIa1pBz8OMD1:Px2k4LYi1pH4o0AkVj1z8OY1
MD5:	01D5892E6E243B52998310C2925B9F3A
SHA1:	58180151B6A6EE4AF73583A214B68EFB9E8844D4
SHA-256:	7E90EFB4620A78E8869796D256BCDDBDE90B853C8C15C5CC116CB11D3D17BC4D
SHA-512:	DE6CA9D539326C1D63A79E90A87D6A69676FC77A2955050B4C5299FAB12B87AF63C3D7F0789D10F4BE214E5C58D6271106A82944D276D5CA361B6D01F7A9F319
Malicious:	false
Preview:	...........}k{........m..i...`.@.....-.G..4$MB.........b.qYk.s.w...#it..."..t ..p.....xq.....;..7l..C1.....B....Q.}....9>..d..&~.....~...=_Z...0.{...w'<..e../..L..A..J.w.R.Jy......XZ..<.......<."....K?.~.xx~..AM.....MF.n.{-/h.p...._[.G.O...........h....>.&...YT..A'.l.........vEY..%..xm4.\..q..0}.i.g.. -T.{txt...... .b....v.W........E.5.~i.O~.._.-.A.I{...kc9.s!....J.y.Z}..@..zA.........Z.....Wh.v..s......,h?Za.p..v......U.....6..n..xq...E...M........zSU..."HCC...i..T..f....g...lf.<k .@.....&n..'...../.+!....3.C...t<..p\...`F..C...t..t. C.RU/.)............_.4/(s........4.[. .........C...x+..A..x.k.i4.2.....5#s.1....m..[.].......6.N....X...dms.._...\...P.2.\|....a~..v...@`....t.-F.(.Fl....k..-...>...2....2T.......[...e....eB.s)...IP..~.q0.}...M.Y.p....\g..,...x..^...I.r.....R.a..x.rqI.H..O..Q...............kb,y*w...N.;J...p>.^..z....:....n B `.6....m...Q....L5.......W2.z^.h.).c...-...H\|.-aPK_0n.L..\|..b..uKv...6=/..6[.x.Dk.R.X..A.h.A.0. ...

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4973
Category:	dropped
Size (bytes):	2065
Entropy (8bit):	7.914284159599081
Encrypted:	false
SSDEEP:	48:XxmDec6tG94eDnbQ4tovU7QzLWV3Ei1kC8hDxjQ:M9bD5mmQ2x1kCExQ
MD5:	67BFD33700A2BAF33407E2B33E135160
SHA1:	D523B40FCDBE2CFB90EDAF31BA5739BC92B004F5
SHA-256:	A101173D8B21FD42F76F74B92891904FF8F8322619A4122915A2740BB28AD55C
SHA-512:	17F189243A83323B85747E7F53112F6B777A1B491ECAE6E9455A6CA5BA56A672CE2D2B025B1366FAC00272081F204BDA6F9B3D10784F54705FBF576408092C45
Malicious:	false
Preview:	...........XkO....\|....1..G....+6......+!.:v'......!.........`.+]F..NUu.S.g.........`.)rv....1kyA.ko....../.7....,6Ap..Z.1.(......R..o.3Y.Z...V.OL.....=..K}......St.'.d2.......p.\..."a.JI.<......K.(.a.T.......e..b...<..Md.Z.\.2..SY.Og...?.....".W./B%...3...E.O.d1ok^jO..M....X&bk...T.0<<...;~.....,5.D.....,......f.5.:...h.?...[...R..[>.&J.G..Ii..e^{....,..x;.?...i.....P.zF.Jf..<...<I.r....rv.;..\.......@_y...,.b..y.i.,.Y.?..s/.3Q&~)=.<.e......@.@.:3... A.....gd]....Z.tCv.W'....p..=.u3...<..Q...m.=e:3"......KG......'...T/..T.d..JY.2.v..c.6.up53.a.$.....k...P.{!L..+n...~C..B...EI....RT2.Zf.I.....<%.l..:.Fw........Qb..Sa..].].c......V.A0...LQ3........]...N.f]#b.......".........ak...l....}.._.j..>mB%d.9p.:.7]u9..$..j/.SS..;..Ls.MD7+.=e..B.l.Z.f.v.{.F,..e.fI"J..6..?._..F2....u.Q..^..@...t..j1......Tn........`0A.....dE.<K.qg\|y~^.O...e..p\|\|..U.\)U.s:k[R....l..<......0lS..C..>.7=.5..Zq........6I.k KC%G;.#..-=..6.........5....;.T...i

Chrome Cache Entry: 1019

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7768
Category:	dropped
Size (bytes):	2065
Entropy (8bit):	7.879400542647417
Encrypted:	false
SSDEEP:	48:XahhKUud500mUyoPHUMS4308EjjyksdJxff6NLx1k4vJFK89pb:KbKUwcUyoPHUMSsFdDf65trK89pb
MD5:	6ABD304C0D64AC089513A0E9A874FECB
SHA1:	2AD3B259F7651AB0E05DE89A3FAE64CA718775DA
SHA-256:	FB25798A83E3765882E3D449F0D5172A90E4E3B0C36C42715B93A3DF8BD1F565
SHA-512:	99BB254D270B57C48679E7D3A59EDEDBB275655C2942BFAB4B735DAAD7FC332982FA9A00368877151E4187093F749F1E4A1D58717EE3453A80007996D21B9EB8
Malicious:	false
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?".....T.......-...Xn...Q...zw.>.Tm[-.....e~.>J.u[y......tR...WW...YZ_L.v..F..;hU..\|{....{..a..k....X>J..>...f.........n......w..y.(..G.O..,[f.....r.~;//s...M.l.......+B.(.......I6}{QW..l.k.w..h...ho.>..f.0.....7N~.d<%42.\.....e...?..">..U6....%.....w.~.1..Q...L.~,Sa......;..c(.bS....6Q..c(......B.....'w...<..4}...y~....[....a.]......D(F...0>.x1..\...;.....}H.+..U.n.j.\|A..@..vw......xe.7}..A-....jYV..&..]...._c..>.?....N.'.u$.0.[}...?....O....W.E^.....B:.o.i{B._,..31....H....@p.l....`(...EV...v..].....o..9....70:8}.. .}v..L...J5..*g.....h.....^......u..jo.(5XD].E..~...m.(..gF.l?..........[..,.G...........5...O6.X..K..Yde.o2.!b.,..XH.p..X?..x.\..F......M[._.V.r..j.'...D.\|.Y...,.q....\|&8}..aP....;.7..h..[......).Y.e.s....j%.},x.....m6).[..MC;.....YK8Le.B...$BW...E..o.M.......~.m....pk.T'.2..6....y&....cVb...&..+0q....i.L....lu...O...o

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 46274
Category:	dropped
Size (bytes):	17168
Entropy (8bit):	7.989364903563379
Encrypted:	false
SSDEEP:	384:MGx2krkLfYLu1yss2Hi3o0AkVAAdIa1pBz8OMD1:Px2k4LYi1pH4o0AkVj1z8OY1
MD5:	01D5892E6E243B52998310C2925B9F3A
SHA1:	58180151B6A6EE4AF73583A214B68EFB9E8844D4
SHA-256:	7E90EFB4620A78E8869796D256BCDDBDE90B853C8C15C5CC116CB11D3D17BC4D
SHA-512:	DE6CA9D539326C1D63A79E90A87D6A69676FC77A2955050B4C5299FAB12B87AF63C3D7F0789D10F4BE214E5C58D6271106A82944D276D5CA361B6D01F7A9F319
Malicious:	false
Preview:	...........}k{........m..i...`.@.....-.G..4$MB.........b.qYk.s.w...#it..."..t ..p.....xq.....;..7l..C1.....B....Q.}....9>..d..&~.....~...=_Z...0.{...w'<..e../..L..A..J.w.R.Jy......XZ..<.......<."....K?.~.xx~..AM.....MF.n.{-/h.p...._[.G.O...........h....>.&...YT..A'.l.........vEY..%..xm4.\..q..0}.i.g.. -T.{txt...... .b....v.W........E.5.~i.O~.._.-.A.I{...kc9.s!....J.y.Z}..@..zA.........Z.....Wh.v..s......,h?Za.p..v......U.....6..n..xq...E...M........zSU..."HCC...i..T..f....g...lf.<k .@.....&n..'...../.+!....3.C...t<..p\...`F..C...t..t. C.RU/.)............_.4/(s........4.[. .........C...x+..A..x.k.i4.2.....5#s.1....m..[.].......6.N....X...dms.._...\...P.2.\|....a~..v...@`....t.-F.(.Fl....k..-...>...2....2T.......[...e....eB.s)...IP..~.q0.}...M.Y.p....\g..,...x..^...I.r.....R.a..x.rqI.H..O..Q...............kb,y*w...N.;J...p>.^..z....:....n B `.6....m...Q....L5.......W2.z^.h.).c...-...H\|.-aPK_0n.L..\|..b..uKv...6=/..6[.x.Dk.R.X..A.h.A.0. ...

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11787
Category:	dropped
Size (bytes):	5822
Entropy (8bit):	7.922413179980826
Encrypted:	false
SSDEEP:	96:KbKYOm4aSgWGzyTZkbUI83AnFm8y08ku0fGt1rmbjycJaSSV5P0IBmKP27oBVKcv:K2YOPaR/mkScmj+YrWkbV5ZBBP27oLKg
MD5:	102EAACD76D6EEDBD37B8437396651F0
SHA1:	250DF2A22F77E27029DA79C91601EF7878619B7F
SHA-256:	9B4385C40923B9ABEF4B3268D921A12741D5BB20770D06104965889F79BF18CE
SHA-512:	74AC5753CFBE0D2F88D1D17335FBB4A9931E27E118844439BCCAB456AA1361C1766C247896D69B23D0C86278FB5E591220E12C313C4FDB2F8AF17C63B9863BBF
Malicious:	false
Preview:	............`.I.%&/m.{.J.J..t...`.$.@........iG#)...eVe]f.@....{...{...;.N'...?\fd.l..J..!....?~\|.?"~.......7....t.....WO.....m...{'w.>}.4........x'}Sg.h.j.......v........qU_.}...;.....v.5......[\|..[..................l....>.6......h.._....e..~...Y...'....<..t.7..2...O>9NWuuQg.E......2[..~/...}\.....?..i...O...K...~........]{....>?..........2.O?:J......)(.N..."?)...f.t..^d..N.............._..i...'.g3z.N..~...ei....c..3....K...k.+.M^..y..G)&.u[..lo.(v.r....\O}....Z2)...k...'..:....VO.w...>..E...yE_...&...}....G.."k.~.].x...y..Y...o..Y....jm.v...K..g.....O..~....7..5..2+.......W_}.../.^..}v.x......O\|.x.....'........4..S...>....m...=y...9....~....<.\|q.../.~..._d....g..r....Y..'.?....;..?....r..O....\|{....&{....?.~.l......\|q...d..L.6..{O......o..?.n~........<<+./...\.>..O6...sj.........~Q..\|.y9..`...x.;;y.z.7+..3j.3.....<.?'.N.\|.'.^.........?y}..'.......n.S.7...Y1...;g.s.S{?yMx._...%.9.......\|gq...;~.....~z...y....~r......

Static File Info

General

File type:	Microsoft Excel 2007+
Entropy (8bit):	7.948853717461942
TrID:	Excel Microsoft Office Open XML Format document (35004/1) 81.40% ZIP compressed archive (8000/1) 18.60%
File name:	Mortgage Calculator and Comparator.xlsx
File size:	241'754 bytes
MD5:	c29f73edea517836cce09300b58b8b1c
SHA1:	b338d8ebcce01887972df73f060034b9466f55f3
SHA256:	f8097b190a9ee64c31755361f50b48ba2093c1bbce93d673f29a1bcd7dc7e06a
SHA512:	745eacd79c206e5acb31dd03fbfc6b81927462785e2d36fcb4e039e23d4e302500828818d13f0e6d4e2be5bd8ae160db075d5c0b4dabc29844a10f28926236d2
SSDEEP:	6144:e5u1oygoW1fvjfR+Csf4tSj6WU6Oaa42Zkit4w/KS/aDWXhducVP:e0SoW1HjJLXtQ86G42ZkblyacZ
TLSH:	6034010D960FBA1CC629483CF11C00E160DE755A1253EC5FA58AF9AC9F939E7A78F25C
File Content Preview:	PK..........!..TL.............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	35e58a8c0c8a85b9

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "Mortgage Calculator and Comparator.xlsx"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 16:17:45.512607098 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:45.512607098 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:45.637592077 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:47.398421049 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 24, 2024 16:17:47.398530006 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:51.469767094 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:51.469809055 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:51.469887972 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:51.471441984 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:51.471462011 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:52.580437899 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:52.580518007 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:52.649203062 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:52.649246931 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:52.649745941 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:52.650955915 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:52.650988102 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:52.651017904 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.056879044 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.107258081 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.107295036 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.108200073 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.108304977 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.108442068 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.108481884 CEST	443	49718	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.108580112 CEST	49718	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.133414030 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.133445024 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.133641005 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.133961916 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.133975983 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.192212105 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.192246914 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.192364931 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.193491936 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:53.193506956 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:53.208918095 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:53.208957911 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:53.209070921 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:53.212157965 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:53.212181091 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:53.963845968 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:53.964009047 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:53.969536066 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:53.969552040 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:53.969831944 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:53.980710983 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.023371935 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.203785896 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.203810930 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.203888893 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.203901052 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.203948021 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.204008102 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.204008102 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.230951071 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.230974913 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.231031895 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.231044054 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.231091022 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.231091022 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.240380049 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.240497112 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.251041889 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.251063108 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.251487017 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.253386974 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.254570961 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.254601955 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.312489986 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.313215017 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.313280106 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.313831091 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.313846111 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.313896894 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.313920975 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.319751978 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.319776058 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.319926977 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.319957018 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.320080996 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.345619917 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.345643997 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.345730066 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.345738888 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.345801115 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.348151922 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.348169088 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.348241091 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.348248005 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.348355055 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.464098930 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.464123011 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.464202881 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.464224100 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.464283943 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.551901102 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.551918983 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.551978111 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.551991940 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.552016020 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.552047014 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.553678036 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.553694963 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.553774118 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.553781033 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.553826094 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.556263924 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.556279898 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.556370974 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.556380987 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.556432962 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.577377081 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.577393055 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.577457905 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.577467918 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.577512026 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.578696012 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.578711987 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.578780890 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.578788996 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.578834057 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.666409016 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.666426897 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.666488886 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.666500092 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.666549921 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.667670965 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.667685986 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.667742968 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.667751074 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.667782068 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.668303013 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.668363094 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.668407917 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.668407917 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.668462038 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.668462038 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.668476105 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.668483973 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.669568062 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.715903044 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.715918064 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.716878891 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.716933966 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.717107058 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.719748020 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.719779968 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.719858885 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.720026016 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.720040083 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.720257998 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.720352888 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.720468044 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.720516920 CEST	443	49719	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:54.720585108 CEST	49719	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:54.720900059 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.720911980 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.726075888 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.726135015 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.726216078 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.726438999 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.726470947 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.727035046 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.727073908 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.727152109 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.727158070 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.727174044 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.727282047 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.727395058 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.727397919 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:54.727415085 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:54.727416992 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.472244024 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.472651005 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.473259926 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.482669115 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.482700109 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.483395100 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.483402967 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.483473063 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.483480930 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.483927011 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.483946085 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.484215975 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.484221935 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.484402895 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.484407902 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.487333059 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.487696886 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.487713099 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.488236904 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.488244057 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.491169930 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.491504908 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.491522074 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.492408991 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.492424965 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.613673925 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.613729000 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.613801956 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.613836050 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.613883972 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.613900900 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.613984108 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.614034891 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.614248991 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.614265919 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.614376068 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.614425898 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.615369081 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.615375042 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.615392923 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.615400076 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.616419077 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.616436958 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.616471052 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.616502047 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.616528988 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.620254993 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.620268106 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.620277882 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.620281935 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.624763012 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.624789000 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.624844074 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.624860048 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.624901056 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.625355959 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.625380039 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.625392914 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.625400066 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.631190062 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.631215096 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.631371021 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.631465912 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.631510973 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.631609917 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.631833076 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.631833076 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.631854057 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.631864071 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.633260012 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.633275986 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.634706020 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.634737015 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.634794950 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.635006905 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.635023117 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.646992922 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.647006035 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.647078991 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.648272038 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.648284912 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.648494005 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.648643017 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.648659945 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.649156094 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.649168968 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.650146008 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.650177956 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:55.650274038 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.650455952 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:55.650477886 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.238271952 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:56.238300085 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:56.238431931 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:56.239916086 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:56.239928007 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:56.395051956 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.396183968 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.396233082 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.397061110 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.397073030 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.398674965 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.399118900 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.399137974 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.399138927 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.399749994 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.399758101 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.400448084 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.400463104 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.401139021 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.401149988 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.401226044 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.401861906 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.401873112 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.402472019 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.402477980 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.410069942 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.410919905 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.410931110 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.411665916 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.411672115 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.529690027 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.530209064 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.530313015 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.535054922 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.535085917 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.536746979 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.536854029 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.537014961 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.537189007 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.537390947 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.537497997 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.538131952 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.538165092 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.538184881 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.538192034 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.538676023 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.538738012 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.538795948 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.539237976 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.539258003 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.541949987 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.541969061 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.541994095 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.542009115 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.546416998 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.546446085 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.546580076 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.546701908 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.546715975 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.548614025 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.548639059 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.548784971 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.549055099 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.549065113 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.549416065 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.549469948 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.549546957 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.549725056 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.549732924 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.549742937 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.549747944 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.552032948 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.552058935 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.552290916 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.552932024 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.552952051 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.552962065 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.552977085 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.553009987 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.553313971 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.553323984 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.556140900 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.556163073 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.556221008 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.556531906 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:56.556544065 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:56.819973946 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.820038080 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.820082903 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.820131063 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.820199966 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.820261002 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.820286989 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.821008921 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.821010113 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.821038961 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.821415901 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.821505070 CEST	443	49720	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.821660042 CEST	49720	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.938894987 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.938918114 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:56.938982964 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.939279079 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:56.939285040 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:57.082712889 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.082818985 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.085652113 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.085659027 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.085860014 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.137597084 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.274399042 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.298028946 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.298650026 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.298666000 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.299316883 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.299320936 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.302189112 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.302552938 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.302563906 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.303028107 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.303034067 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.304522038 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.306411982 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.306428909 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.306876898 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.306881905 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.307676077 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.308118105 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.308139086 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.308672905 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.308681965 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.308765888 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.309154034 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.309169054 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.309672117 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.309676886 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.315320969 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.435349941 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.435435057 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.435643911 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.435888052 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.435899019 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.435909033 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.435914040 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.439876080 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.439901114 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.439971924 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.440140009 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.440164089 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.441816092 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.442312002 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.442390919 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.442420959 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.442420959 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.442436934 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.442446947 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.443274975 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.443428040 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.443468094 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.443597078 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.443603039 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.443615913 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.443619013 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.446969986 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.446974993 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447012901 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447098970 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447396040 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447400093 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447418928 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447422028 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447592974 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447647095 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447705030 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447731972 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447767973 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447777987 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447788000 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.447792053 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.447822094 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.448023081 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.448033094 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.448957920 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.448980093 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.449203968 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.449502945 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.449525118 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.451777935 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.451792955 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.451854944 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.452147961 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.452157021 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.453126907 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.453141928 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.453239918 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.453372955 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:57.453382969 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:57.461642027 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:57.461900949 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:57.462992907 CEST	49746	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:57.463001966 CEST	443	49746	23.1.237.91	192.168.2.5
Oct 24, 2024 16:17:57.463068962 CEST	49746	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:57.463435888 CEST	49746	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:57.463445902 CEST	443	49746	23.1.237.91	192.168.2.5
Oct 24, 2024 16:17:57.469300032 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 24, 2024 16:17:57.469616890 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 24, 2024 16:17:57.568455935 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568475008 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568481922 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568519115 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568555117 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568559885 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.568576097 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568605900 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.568615913 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.568639994 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.568650007 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.568938017 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.569010973 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.569015980 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.569341898 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.569396019 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.582145929 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.582151890 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:57.582185030 CEST	49733	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:17:57.582189083 CEST	443	49733	20.12.23.50	192.168.2.5
Oct 24, 2024 16:17:58.150518894 CEST	443	49746	23.1.237.91	192.168.2.5
Oct 24, 2024 16:17:58.150595903 CEST	49746	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:17:58.194642067 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.195681095 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.195700884 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.196527958 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.196540117 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.198832989 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.199412107 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.199426889 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.199999094 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.200004101 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.206682920 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.207201004 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.207207918 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.207737923 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.207741022 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.210205078 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.210726976 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.210736036 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.211143970 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.211158991 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.217154026 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.220503092 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.220551014 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.221010923 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.221026897 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.303118944 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:58.303806067 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:58.303817034 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:58.304563046 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:58.304568052 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:58.304604053 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:58.304635048 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:58.329571962 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.329752922 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.329823971 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.329937935 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.329957008 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.329981089 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.329994917 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.333107948 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.333127975 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.333256960 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.333447933 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.333462000 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.336273909 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.336314917 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.336353064 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.336464882 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.336468935 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.336492062 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.336496115 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.339009047 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.339051962 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.339133978 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.339272022 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.339298964 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.343255043 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.343300104 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.343352079 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.343480110 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.343488932 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.343498945 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.343504906 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.346427917 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.346453905 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.346544027 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.346669912 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.346682072 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.347688913 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.347760916 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.347826004 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.347914934 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.347914934 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.347925901 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.347934008 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.349962950 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.349986076 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.350270987 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.350403070 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.350425959 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.355890989 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.355987072 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.356081963 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.356136084 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.356136084 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.356156111 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.356177092 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.358571053 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.358591080 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:58.358738899 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.358823061 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:58.358835936 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.018017054 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.018083096 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.018150091 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.018162966 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.018212080 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.018230915 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.018863916 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.018876076 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.018951893 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.019174099 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.019260883 CEST	443	49740	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.019387960 CEST	49740	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.076699018 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.076725960 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.076805115 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.076978922 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:17:59.076988935 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:17:59.098258018 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.098701954 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.098716021 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.099198103 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.099204063 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.106648922 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.106673002 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.107131958 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.107176065 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.107553005 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.107566118 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.107640982 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.107656002 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.108009100 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.108022928 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.108848095 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.109153032 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.109168053 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.109529972 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.109534979 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.112473965 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.112819910 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.112839937 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.113209009 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.113214970 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.233803034 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.233869076 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.234121084 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.234406948 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.234425068 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.237498999 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.237535000 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.237667084 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.237934113 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.237948895 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.247670889 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.247783899 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.247864962 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.248308897 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.248322010 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.248927116 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.249036074 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.249119043 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.250336885 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.250377893 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.250416994 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.250433922 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.250519991 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.250663996 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.250745058 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.250751972 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.250834942 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.250899076 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.251153946 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.251168966 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.251178980 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.251183987 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.251908064 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.251923084 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.267931938 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.267998934 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.268070936 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.268291950 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.268317938 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.268547058 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269081116 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269093990 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.269134045 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269167900 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.269292116 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269303083 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269323111 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.269402981 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269421101 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.269489050 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269531012 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.269582033 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269707918 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.269722939 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.980412960 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.981741905 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.981743097 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:17:59.981762886 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:17:59.981781006 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.044465065 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.045156002 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.045171022 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.045815945 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.045819998 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.049391985 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.050167084 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.050167084 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.050219059 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.050260067 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.051496983 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.052141905 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.052141905 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.052155018 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.052169085 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.114059925 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.114121914 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.114352942 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.114379883 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.114379883 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.114396095 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.114403963 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.117173910 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.117211103 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.117533922 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.117533922 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.117566109 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.179255009 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.179456949 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.179573059 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.179573059 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.179833889 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.179848909 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.182481050 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.182522058 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.182730913 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.182730913 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.182771921 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.186512947 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.186713934 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.186842918 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.186842918 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.186913967 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.186932087 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.187813044 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.188666105 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.188682079 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.189229965 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.189244986 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.189244986 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.189253092 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.189269066 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.189294100 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.189383984 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.189543009 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.189589977 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.189589977 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.189614058 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.189615011 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.189652920 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.189666033 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.189668894 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.191848040 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.191907883 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.192091942 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.192152977 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.192168951 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.455800056 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.456374884 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.456398964 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.457195044 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.457201958 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.683468103 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.683530092 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.683576107 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.683613062 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.683626890 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.683681011 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.684036016 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.684048891 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.684075117 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.684400082 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.684478998 CEST	443	49752	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.684984922 CEST	49752	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.726730108 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.726767063 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.726871967 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.727061987 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:00.727085114 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:00.831950903 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.832021952 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.832082033 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.832364082 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.832376003 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.832384109 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.832389116 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.835407972 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.835491896 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.835594893 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.835794926 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.835829020 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.884116888 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.884601116 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.884614944 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.885163069 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.885168076 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.937429905 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.938220024 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.938246965 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.938685894 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.938692093 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.953731060 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.954274893 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.954297066 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.954758883 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.954766035 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.954804897 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.955307007 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.955368042 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:00.955602884 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:00.955616951 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.020096064 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.020487070 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.020550013 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.020618916 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.020628929 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.024002075 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.024035931 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.024169922 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.024419069 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.024442911 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.071460962 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.071603060 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.071744919 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.071788073 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.071788073 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.071808100 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.071815968 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.074569941 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.074604988 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.074686050 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.074843884 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.074858904 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.090127945 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.090270042 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.090338945 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.090492010 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.090492010 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.090523958 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.090548038 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.093647003 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.093669891 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.093746901 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.093750000 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.093791008 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.094011068 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.094028950 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.094033003 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.094083071 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.094115973 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.094142914 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.094158888 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.095967054 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.095988989 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.096399069 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.096545935 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.096560001 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.601310968 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.602210999 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.602230072 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.602735043 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.602740049 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.742993116 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.743169069 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.743240118 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.743431091 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.743446112 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.743469000 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.743474007 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.747199059 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.747291088 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.747392893 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.747706890 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.747740984 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.775830984 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.776298046 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.776371002 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.776854992 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.776869059 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.825418949 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:01.826805115 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:01.826867104 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:01.827387094 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:01.827403069 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:01.827450037 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:01.827476978 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:01.839430094 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.839890957 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.839909077 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.840325117 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.840329885 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.852638006 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.855446100 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.855508089 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.855777025 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.855791092 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.912674904 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.912743092 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.912935019 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.913028002 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.913028002 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.913074970 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.913105965 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.916285038 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.916349888 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.916474104 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.916657925 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.916676998 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.976427078 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.976684093 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.976763010 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.977025032 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.977055073 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.977065086 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.977072001 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.980083942 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.980139971 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.980308056 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.980503082 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.980525017 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.991995096 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.992150068 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.992237091 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.992330074 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.992376089 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.992408991 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.992424965 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.995892048 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.995944023 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:01.996037960 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.996170044 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:01.996191978 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.205800056 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.205859900 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.205982924 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.206048012 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.206481934 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.206481934 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.206526041 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.206826925 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.206914902 CEST	443	49762	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.206990957 CEST	49762	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.244014978 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.244072914 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.244168997 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.244446993 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.244474888 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.246823072 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.246865988 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.246948004 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.247208118 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:02.247221947 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:02.513977051 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.514863968 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.514955997 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.515652895 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.515670061 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.651815891 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.651966095 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.652117014 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.652434111 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.652497053 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.652537107 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.652554035 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.658123016 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.658144951 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.658221006 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.658380985 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.658386946 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.729041100 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.730150938 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.730189085 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.731056929 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.731071949 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.760437012 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.760992050 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.761014938 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.761472940 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.761480093 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.846060991 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.846642971 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.846659899 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.847455025 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.847460985 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.863164902 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.863230944 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.863307953 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.863688946 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.863717079 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.863744020 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.863770962 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.867494106 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.867537975 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.867697954 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.868041992 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.868058920 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.899240017 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.899403095 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.899466038 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.899612904 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.899641037 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.899653912 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.899662971 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.903125048 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.903167963 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.903351068 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.904150963 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.904176950 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.984234095 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.984337091 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.984471083 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.984739065 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.984756947 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.984771967 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.984782934 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.987809896 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.987860918 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:02.987950087 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.988115072 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:02.988132954 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.188175917 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.191267014 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.191283941 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.191759109 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.191764116 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.326443911 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.326852083 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.326931000 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.326975107 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.326999903 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.327013969 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.327022076 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.330117941 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.330143929 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.330224991 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.330374002 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.330389023 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.354995012 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.355118990 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.357311010 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.358771086 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.358778000 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.359072924 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.359076023 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.359090090 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.359728098 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.359729052 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.359739065 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.359757900 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.360040903 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.360100985 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.360115051 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.447490931 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.449696064 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.449709892 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.450314999 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.450325012 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.584449053 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.584901094 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.585074902 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.585104942 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.585120916 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.585131884 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.585136890 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.588112116 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.588206053 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.588299990 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.588443995 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.588475943 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.608833075 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.609354019 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.609385967 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.609836102 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.609843016 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.670836926 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.671525002 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.671545029 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.672025919 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.672032118 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.737620115 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.737648964 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.737715960 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.737749100 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.738132000 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.738153934 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.738321066 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.738353968 CEST	443	49772	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:03.738528967 CEST	49772	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:03.747376919 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.747454882 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.747533083 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.748157024 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.748157024 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.748177052 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.748188972 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.751442909 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.751471043 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.751555920 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.751723051 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.751737118 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.807564974 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.807728052 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.807792902 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.807919025 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.807935953 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.807959080 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.807965994 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.811578989 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.811613083 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:03.811686039 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.811866045 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:03.811877012 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.005399942 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.006279945 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.006345034 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.006685019 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.006700039 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.080059052 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.095117092 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.095138073 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.095769882 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.095776081 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.144577980 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.144633055 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.144751072 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.145045996 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.145059109 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.145101070 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.145112991 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.149313927 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.149348021 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.149470091 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.149883032 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.149897099 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.228282928 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.228394032 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.228502989 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.228832006 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.228832006 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.228854895 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.228883982 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.232599020 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.232625008 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.233618975 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.233907938 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.233918905 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.298115015 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298136950 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298173904 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298188925 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.298199892 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298217058 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.298680067 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.298696995 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298708916 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.298810005 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298835039 CEST	443	49773	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.298883915 CEST	49773	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.349631071 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.350307941 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.350399971 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.350666046 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.350681067 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.396456957 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.396486998 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.396578074 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.397044897 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:04.397058964 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:04.486175060 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.486341953 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.486700058 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.486788988 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.486788988 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.486835957 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.486871958 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.489958048 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.490031004 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.490132093 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.490309954 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.490328074 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.503228903 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.503703117 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.503721952 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.504184008 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.504189014 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.579103947 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.579833031 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.579857111 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.580312967 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.580321074 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.639415979 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.639620066 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.639810085 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.639839888 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.639853954 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.639889002 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.639895916 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.643137932 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.643193960 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.643266916 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.643424988 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.643443108 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.718678951 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.718782902 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.718947887 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.719156981 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.719172955 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.719182968 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.719187975 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.722606897 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.722693920 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.722789049 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.722995043 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.723028898 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.908432961 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.909370899 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.909384012 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.909887075 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.909892082 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.985430956 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.986589909 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.986605883 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:04.987133980 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:04.987138987 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.041600943 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.041769028 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.041903019 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.042653084 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.042653084 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.042682886 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.042692900 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.046951056 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.046972990 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.047040939 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.047203064 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.047224998 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.122608900 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.122674942 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.122744083 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.123219013 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.123234987 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.123253107 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.123260975 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.126210928 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.126300097 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.128154039 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.130279064 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.130314112 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.253680944 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.254431009 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.254484892 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.254951954 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.254971027 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.390885115 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.391081095 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.391222954 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.391285896 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.391285896 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.391345024 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.391369104 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.394285917 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.394335032 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.394427061 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.394592047 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.394609928 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.429872036 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.431788921 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.431818962 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.432425022 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.432432890 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.476031065 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.479871988 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.479916096 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.480390072 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.480402946 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.501221895 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.503113985 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.503137112 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.503794909 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.503801107 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.503834009 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.503843069 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.567161083 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.567401886 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.567487955 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.567522049 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.567539930 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.567553997 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.567560911 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.570552111 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.570611000 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.570684910 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.570816994 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.570833921 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.611025095 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.611200094 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.611388922 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.611388922 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.611388922 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.613782883 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.613812923 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.613898993 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.614037991 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.614053011 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.796859980 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.798177004 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.798191071 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.798698902 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.798702955 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.894857883 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.896431923 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.896456957 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.897227049 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.897233009 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.918859959 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.918927908 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.925136089 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.925157070 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.925204039 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.925221920 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.925234079 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.925255060 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.925795078 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.925810099 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.925822020 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.925946951 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.925975084 CEST	443	49784	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:05.926021099 CEST	49784	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:05.932363987 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.932497025 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.932758093 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.936378956 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.936393976 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.936439991 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.936448097 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.941555977 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.941612005 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:05.941775084 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.941930056 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:05.941948891 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.001509905 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:06.001538992 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:06.001728058 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:06.001934052 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:06.001950979 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:06.033329964 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.033401012 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.033730984 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.033731937 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.033731937 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.036456108 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.036514997 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.036592007 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.036725044 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.036744118 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.163234949 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.163891077 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.163913965 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.164376020 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.164381027 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.299832106 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.300009012 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.300282955 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.300375938 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.300375938 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.300425053 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.300455093 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.304007053 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.304030895 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.304122925 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.304295063 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.304307938 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.336550951 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.337199926 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.337232113 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.337594032 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.337601900 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.340718985 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.340735912 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.389090061 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.389657021 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.389691114 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.390104055 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.390110016 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.474422932 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.474632025 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.474754095 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.475058079 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.475058079 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.475085020 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.475092888 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.477921963 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.477946043 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.478033066 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.478219032 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.478230000 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.529964924 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.530105114 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.530200005 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.530428886 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.530441999 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.530452967 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.530457973 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.533693075 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.533732891 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.533863068 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.534024000 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.534038067 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.703366995 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.703915119 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.703963041 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.704591990 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.704608917 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.805296898 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.806543112 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.806588888 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.807233095 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.807249069 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.855417013 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.855571032 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.855736971 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.855802059 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.855802059 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.855840921 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.855868101 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.859338999 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.859428883 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.859510899 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.859724998 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.859761953 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.944905043 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.945070982 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.945142031 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.945255041 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.945283890 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.945311069 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.945326090 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.948214054 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.948244095 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:06.948550940 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.948692083 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:06.948698044 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.059385061 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.060070992 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.060090065 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.060554028 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.060559034 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.114768028 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.115593910 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.115601063 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.116377115 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.116380930 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.116427898 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.116434097 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.199373007 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.199743032 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.199848890 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.199884892 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.199903011 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.199925900 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.199932098 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.203026056 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.203059912 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.203244925 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.203332901 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.203339100 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.232780933 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.233547926 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.233606100 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.234069109 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.234082937 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.306358099 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.306886911 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.306901932 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.307466030 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.307471037 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.368654013 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.368726969 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.368792057 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.369096994 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.369096994 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.369143009 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.369174004 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.372762918 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.372792959 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.372880936 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.373054028 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.373070002 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.442512035 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.442672014 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.442723036 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.442842960 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.442842960 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.442857981 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.442867994 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.445277929 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.445310116 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.445420027 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.445563078 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.445575953 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.509049892 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.509118080 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.509202957 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.509309053 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.509330988 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.509346008 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.512155056 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.512166977 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.512176991 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.512567043 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.512669086 CEST	443	49794	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.512743950 CEST	49794	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.588804007 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.588838100 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.588958979 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.589227915 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:07.589241982 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:07.608880043 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.610599995 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.610624075 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.611116886 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.611123085 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.694319963 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.698270082 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.698297977 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.698823929 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.698833942 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.744497061 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.744699955 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.744770050 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.744800091 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.744816065 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.744828939 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.744836092 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.748732090 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.748776913 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.748925924 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.749104023 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.749121904 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.835803986 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.835912943 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.836018085 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.836685896 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.836685896 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.836738110 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.836750984 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.839592934 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.839637995 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.839936972 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.840223074 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.840244055 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.956965923 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.957565069 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.957608938 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:07.958065987 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:07.958072901 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.095015049 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.095225096 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.095290899 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.095547915 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.095567942 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.095582962 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.095587969 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.098409891 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.098442078 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.098520041 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.098683119 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.098699093 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.132834911 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.133305073 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.133344889 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.133852959 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.133869886 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.268795967 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.268959999 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.269278049 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.269309998 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.269329071 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.269344091 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.269351959 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.272561073 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.272629023 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.272726059 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.272876978 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.272914886 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.342526913 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.343137980 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.343173027 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.343657970 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.343672037 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.480772018 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.480964899 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.481163979 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.481185913 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.481203079 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.481214046 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.481218100 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.484842062 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.484896898 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.484970093 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.485121965 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.485138893 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.496064901 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.496547937 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.496573925 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.497927904 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.497936010 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.596497059 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.597304106 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.597323895 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.598148108 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.598154068 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.630620003 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.630796909 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.630950928 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.630984068 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.630984068 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.630997896 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.631006956 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.634686947 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.634706974 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.634800911 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.634988070 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.634990931 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.701714993 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:08.702399015 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:08.702416897 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:08.703377962 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:08.703389883 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:08.703452110 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:08.703463078 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:08.734931946 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.734985113 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.735089064 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.735317945 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.735317945 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.735327959 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.735336065 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.738224030 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.738264084 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.738336086 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.738519907 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.738535881 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.865140915 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.869455099 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.869462967 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:08.871174097 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:08.871177912 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.006783009 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.006958961 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.007023096 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.007193089 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.007209063 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.007225037 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.007230997 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.011071920 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.011099100 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.011157036 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.011405945 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.011420965 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.040087938 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.040594101 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.040617943 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.041246891 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.041253090 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.107996941 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.108042955 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.108069897 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.108226061 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:09.108226061 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:09.108263969 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.108666897 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:09.108680010 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.108700037 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:09.108864069 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.108910084 CEST	443	49804	20.190.160.20	192.168.2.5
Oct 24, 2024 16:18:09.110733032 CEST	49804	443	192.168.2.5	20.190.160.20
Oct 24, 2024 16:18:09.176013947 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.176172972 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.176348925 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.176373959 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.176379919 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.176388979 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.176393032 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.179363012 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.179384947 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.179497957 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.179606915 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.179621935 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.250593901 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.254827023 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.254874945 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.255325079 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.255343914 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.393670082 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.393723965 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.393868923 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.393925905 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.394110918 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.394165039 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.394193888 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.394210100 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.394217968 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.397320032 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.397377014 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.397447109 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.397583961 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.397605896 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.399137974 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.399585962 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.399668932 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.400091887 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.400110960 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.483192921 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.483778000 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.483797073 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.484330893 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.484339952 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.537452936 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.537729979 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.537911892 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.537977934 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.537978888 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.538017988 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.538043022 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.541649103 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.541695118 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.541837931 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.542052984 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.542076111 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.618901014 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.618957996 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.619038105 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.619378090 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.619401932 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.619416952 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.619424105 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.622905970 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.622994900 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.623095989 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.623368025 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.623400927 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.769057989 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.769896030 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.769920111 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.771049023 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.771055937 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.905392885 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.905421972 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.905500889 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.905544043 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.905580997 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.906431913 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.906456947 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.906472921 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.906480074 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.910094023 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.910126925 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.910300970 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.910690069 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.910702944 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.929215908 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.929719925 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.929738998 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:09.930242062 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:09.930254936 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.065110922 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.065176010 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.065295935 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.065308094 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.065349102 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.065355062 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.065426111 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.065674067 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.065674067 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.065685987 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.065694094 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.069442034 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.069535017 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.069628000 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.069820881 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.069849014 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.177267075 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.177921057 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.177943945 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.178515911 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.178524017 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.309273005 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.310107946 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.310122013 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.310600996 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.310615063 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.316441059 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.316502094 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.316569090 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.316589117 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.316672087 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.316783905 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.316824913 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.316844940 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.316857100 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.316864014 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.319928885 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.319967985 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.320035934 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.320178986 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.320190907 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.369891882 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.371236086 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.371320963 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.371793985 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.371809959 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.447576046 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.447766066 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.447849989 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.448091984 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.448091984 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.448111057 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.448121071 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.451330900 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.451378107 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.451473951 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.451678991 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.451695919 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.506985903 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.507046938 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.507230043 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.507544041 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.507544041 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.507611036 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.507646084 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.510421991 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.510459900 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.510530949 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.510844946 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.510859966 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.663697004 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.664469957 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.664491892 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.664913893 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.664920092 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.800960064 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.801166058 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.801239014 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.801363945 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.801381111 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.801392078 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.801397085 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.805143118 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.805234909 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.805352926 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.805522919 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.805551052 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.829751968 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.830349922 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.830393076 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.830841064 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.830849886 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.967787981 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.967957020 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.968136072 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.968184948 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.968209028 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.968224049 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.968231916 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.971537113 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.971574068 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:10.971663952 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.971807957 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:10.971817017 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.073158026 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.074986935 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.075014114 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.075818062 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.075825930 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.212768078 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.212929964 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.213028908 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.213304043 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.213323116 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.213335037 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.213345051 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.214338064 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.214807987 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.214854956 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.215339899 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.215357065 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.217206955 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.217298031 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.217396975 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.217590094 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.217617989 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.264029026 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.267195940 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.267224073 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.267713070 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.267724991 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.354486942 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.354657888 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.354878902 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.354918957 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.354918957 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.354935884 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.354947090 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.358234882 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.358285904 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.358386040 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.358581066 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.358598948 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.403701067 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.403803110 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.403876066 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.404126883 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.404139996 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.404165983 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.404171944 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.407445908 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.407491922 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.407615900 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.407864094 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.407883883 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.560858011 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.561538935 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.561568022 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.562057018 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.562062979 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.698139906 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.698254108 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.698427916 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.698720932 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.698739052 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.698749065 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.698754072 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.702903032 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.702941895 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.703113079 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.703186989 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.703196049 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.726948977 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.727593899 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.727619886 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.728210926 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.728223085 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.869261980 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.869431019 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.869497061 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.875025988 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.875040054 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.875050068 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.875055075 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.879623890 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.879666090 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.879762888 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.880091906 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.880108118 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.986980915 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.987644911 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.987730980 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:11.988147020 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:11.988163948 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.124557972 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.124627113 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.124804974 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.125240088 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.125283003 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.125323057 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.125340939 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.126852036 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.127362967 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.127392054 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.127851963 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.127859116 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.129029989 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.129066944 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.129160881 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.129328012 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.129342079 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.169369936 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.170378923 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.170423031 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.170856953 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.170870066 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.266889095 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.266928911 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.266999960 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.267081976 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.267118931 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.267514944 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.267546892 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.267558098 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.267564058 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.271553993 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.271593094 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.271733046 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.272026062 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.272036076 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.306453943 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.306967020 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.307079077 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.307121038 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.307135105 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.307157040 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.307162046 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.346690893 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.346735954 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.346838951 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.347146034 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.347161055 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.452933073 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.453619957 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.453654051 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.454113960 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.454119921 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.588361979 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.588396072 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.588443041 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.588454962 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.588485003 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.588745117 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.588762045 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.588773966 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.588779926 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.591685057 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.591718912 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.591859102 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.592051983 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.592061996 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.619216919 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.619698048 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.619713068 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.620165110 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.620172024 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.752741098 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.752830982 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.753072023 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.753103971 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.753120899 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.753133059 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.753138065 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.756469011 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.756519079 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.756607056 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.756791115 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.756803989 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.876781940 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.877528906 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.877549887 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:12.877895117 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:12.877902031 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.013231993 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.013473034 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.013665915 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.016218901 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.016218901 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.016248941 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.016264915 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.019788980 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.019829035 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.019984961 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.020239115 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.020251036 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.049814939 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.050472975 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.050498962 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.050961018 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.050966024 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.089103937 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.089893103 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.089914083 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.090131998 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.090138912 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.190458059 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.190607071 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.190916061 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.190993071 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.191009998 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.191024065 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.191030025 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.194363117 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.194401979 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.194513083 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.194727898 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.194758892 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.223984957 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.224019051 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.224078894 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.224087000 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.224124908 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.224317074 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.224335909 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.224350929 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.224370956 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.229486942 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.229522943 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.229641914 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.229825020 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.229856968 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.363652945 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.381036997 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.381058931 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.381587982 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.381596088 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.516308069 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.516699076 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.516819000 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.517133951 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.517152071 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.517165899 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.517170906 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.519473076 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.520155907 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.520204067 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.520504951 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.520535946 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.520539999 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.520979881 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.520987034 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.521125078 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.521142960 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.656876087 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.657061100 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.657215118 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.657490015 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.657516956 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.657533884 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.657542944 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.660814047 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.660907984 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.661010027 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.661216021 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.661240101 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.768476963 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.769628048 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.769659042 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.770126104 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.770133018 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.904175997 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.904247046 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.904556990 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.904601097 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.904601097 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.904618979 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.904629946 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.907751083 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.907800913 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.907891989 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.908054113 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.908061981 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.951613903 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.952266932 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.952306986 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.952747107 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.952759027 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.982688904 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.984687090 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.984750986 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:13.985100985 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:13.985116005 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.089896917 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.089941978 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.090075970 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.090257883 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.090349913 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.090377092 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.090395927 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.090403080 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.093642950 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.093676090 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.093797922 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.094027042 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.094042063 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.119409084 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.119499922 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.119712114 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.119801044 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.119801044 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.119847059 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.119874954 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.122710943 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.122756004 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.122838974 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.123030901 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.123044014 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.280435085 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.281091928 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.281100035 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.281589031 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.281591892 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.426891088 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.427238941 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.427308083 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.427330017 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.427380085 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.427429914 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.427449942 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.427460909 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.427468061 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.427474976 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.427479982 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.430620909 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.430655956 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.430730104 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.430893898 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.430911064 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.441015005 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.441476107 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.441536903 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.441941977 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.441958904 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.581506014 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.581685066 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.581944942 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.582020998 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.582020998 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.582063913 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.582091093 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.585256100 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.585350990 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.585469961 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.585659981 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.585689068 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.658893108 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.659821987 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.659851074 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.660326004 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.660332918 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.795928001 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.796098948 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.796166897 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.796502113 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.796520948 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.796530008 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.796535969 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.800635099 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.800656080 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.800761938 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.801078081 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.801095009 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.858551979 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.859117031 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.859153032 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.859709024 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.859715939 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.872389078 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.873404026 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.873483896 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.874078035 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.874094009 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.997514963 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.997606039 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.997703075 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.997982979 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.998003006 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:14.998017073 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:14.998023987 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.001293898 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.001388073 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.001485109 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.001667023 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.001696110 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.008158922 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.008234978 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.008291006 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.008358002 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.008413076 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.008413076 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.008445024 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.008467913 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.010736942 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.010766983 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.010838985 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.010963917 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.010977030 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.188606977 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.189280987 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.189305067 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.189790010 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.189796925 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.326085091 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.326235056 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.326476097 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.326507092 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.326522112 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.326535940 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.326543093 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.330405951 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.330495119 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.330588102 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.330725908 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.330749035 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.341489077 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.342125893 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.342187881 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.342622042 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.342653036 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.479775906 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.479964018 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.480063915 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.480329990 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.480346918 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.480360985 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.480365992 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.484025002 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.484080076 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.484180927 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.484334946 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.484349012 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.570734024 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.571517944 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.571532011 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.572047949 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.572053909 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.711965084 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.712137938 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.712219954 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.712476015 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.712496996 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.712523937 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.712529898 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.715642929 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.715687037 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.715754032 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.717017889 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.717034101 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.756165028 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.756594896 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.757226944 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.757288933 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.757741928 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.757756948 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.757975101 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.757991076 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.758308887 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.758313894 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.892644882 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.892852068 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.892947912 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.892982006 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.893007994 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.893018961 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.893026114 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.896013975 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.896104097 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.896198034 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.896406889 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.896446943 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.897531033 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.897602081 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.897741079 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.897746086 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.897794008 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.897840977 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.897876978 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.897905111 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.897919893 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.899965048 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.900003910 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:15.900072098 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.900216103 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:15.900229931 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.088972092 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.089761019 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.089833975 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.090260983 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.090291977 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.226098061 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.226471901 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.226677895 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.226677895 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.226677895 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.229769945 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.229823112 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.229902029 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.230128050 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.230142117 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.241497993 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.241992950 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.242024899 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.242446899 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.242453098 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.389869928 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.390100002 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.390181065 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.390431881 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.390455961 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.390469074 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.390480995 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.393989086 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.394000053 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.394067049 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.394386053 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.394397020 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.465599060 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.468787909 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.468820095 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.469265938 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.469271898 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.528368950 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.528408051 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.603678942 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.603709936 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.603754997 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.603823900 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.603878975 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.604197025 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.604222059 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.604234934 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.604239941 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.607832909 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.607882977 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.607961893 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.608113050 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.608135939 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.654597044 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.655184031 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.655210018 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.655680895 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.655690908 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.666255951 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.666630030 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.666657925 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.666961908 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.666969061 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.795922995 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.795999050 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.796179056 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.806807995 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.806993008 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.807118893 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.812879086 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.812879086 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.812910080 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.812922001 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.815202951 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.815241098 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.815258980 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.815264940 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.820818901 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.820852995 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.820915937 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.823507071 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.823514938 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.823570967 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.824295998 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.824307919 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.824559927 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.824568987 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.975003004 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.975589991 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.975608110 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:16.976012945 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:16.976027966 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.117680073 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.117854118 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.117924929 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.118155956 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.118155956 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.118172884 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.118181944 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.136425972 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.136477947 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.136576891 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.137409925 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.137428999 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.157748938 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.158370018 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.158382893 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.158924103 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.158930063 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.301079988 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.301116943 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.301177025 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.301276922 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.301306009 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.301599979 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.301604986 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.301615000 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.301618099 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.304999113 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.305022955 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.305121899 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.305301905 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.305311918 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.319461107 CEST	443	49746	23.1.237.91	192.168.2.5
Oct 24, 2024 16:18:17.319555998 CEST	49746	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:18:17.356879950 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.357882023 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.357913017 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.358395100 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.358409882 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.499042034 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.499129057 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.499270916 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.499475956 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.499475956 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.499497890 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.499507904 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.502572060 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.502612114 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.502691984 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.502851963 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.502866983 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.598217964 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.598932028 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.598957062 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.599446058 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.599451065 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.601978064 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.602405071 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.602420092 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:17.602869987 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:17.602874994 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.736978054 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737051964 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737309933 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.737346888 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.737365007 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737375975 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.737380981 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737389088 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737458944 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737572908 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737628937 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.737756968 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.737761021 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.737771988 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.737775087 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.740622044 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.740665913 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.740678072 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.740719080 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.740737915 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.740773916 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.740916014 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.740921974 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.740925074 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.740931988 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.874697924 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.878819942 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.878835917 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.879328012 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.879343033 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.885344982 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.887095928 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.887116909 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.887450933 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.887461901 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.887969017 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.890583038 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.890603065 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:18.890985966 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:18.890991926 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.020085096 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.020168066 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.020287991 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.020404100 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.020538092 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.020571947 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.020600080 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.020607948 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.023938894 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.023962021 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.024046898 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.024244070 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.024255037 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.026604891 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.026772976 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.026832104 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.026865959 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.026865959 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.026881933 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.026890039 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.029154062 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.029175043 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.029242039 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.029351950 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.029362917 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.070719004 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.070744038 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.070787907 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.070817947 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.070866108 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.071017027 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.071034908 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.071058989 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.071067095 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.073148012 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.073184967 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.073282957 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.073396921 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.073414087 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.499650955 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.500406981 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.500436068 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.500902891 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.500910044 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.509841919 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.510241985 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.510272980 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.510592937 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.510597944 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.635777950 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.635919094 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.636102915 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.636147022 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.636147022 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.636164904 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.636176109 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.639008045 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.639044046 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.639121056 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.639252901 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.639260054 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.650295973 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.650430918 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.650461912 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.650512934 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.650563955 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.650577068 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.650584936 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.650589943 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.652864933 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.652951956 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.653029919 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.653131008 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.653151989 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.770474911 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.770946026 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.770975113 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.771420002 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.771425962 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.813158989 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.813522100 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.813535929 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.813929081 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.813934088 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.834633112 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.835098028 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.835122108 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.835571051 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.835582972 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.905824900 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.905895948 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.905946016 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.906476974 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.906498909 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.906528950 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.906534910 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.922303915 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.922327042 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.922389030 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.923207045 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.923217058 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.953247070 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.955348969 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.955410957 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.955476046 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.955492973 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.959496975 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.959530115 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.959594965 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.959902048 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.959914923 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.971256018 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.971465111 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.971537113 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.971635103 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.971636057 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.971682072 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.971709967 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.974934101 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.974958897 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:19.975029945 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.975212097 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:19.975225925 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.399586916 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.400197983 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.400222063 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.400672913 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.400679111 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.431922913 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.432662964 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.432722092 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.433037043 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.433052063 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.538378000 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.538454056 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.538508892 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.538516998 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.538573027 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.538625956 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.538872957 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.538872957 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.538887978 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.538897991 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.542068958 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.542148113 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.542242050 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.542396069 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.542414904 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.568285942 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.568536997 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.568648100 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.577034950 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.577083111 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.577117920 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.577135086 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.580985069 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.581041098 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.581125021 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.581348896 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.581367016 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.695198059 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.695761919 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.695770979 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.696244001 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.696249962 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.726821899 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.727353096 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.727377892 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.727829933 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.727840900 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.729933977 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.730479002 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.730487108 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.730932951 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.730937004 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.833924055 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.833996058 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.834069014 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.834078074 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.834106922 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.834158897 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.834351063 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.834357977 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.834389925 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.834394932 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.837625027 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.837636948 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.837699890 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.837862015 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.837873936 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.863934994 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.864099979 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.864173889 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.864346981 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.864347935 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.864366055 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.864387035 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.866297007 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.866477966 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.866568089 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.866684914 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.866688967 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.866699934 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.866703033 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.867585897 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.867610931 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.867753983 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.867938042 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.867961884 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.868911982 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.868921995 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:20.868993998 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.869113922 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:20.869132996 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.309005022 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.309555054 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.309581041 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.310035944 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.310048103 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.334296942 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.334836006 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.334846020 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.335269928 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.335273981 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.448964119 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.449127913 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.449307919 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.450985909 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.450985909 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.451014042 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.451040030 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.452433109 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.452507019 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.452630043 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.452816963 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.452852011 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.474262953 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.474287987 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.474319935 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.474394083 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.474632025 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.474643946 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.474654913 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.474658966 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.477247000 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.477262020 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.477338076 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.477505922 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.477514029 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.600970030 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.605824947 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.605843067 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.606334925 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.606338978 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.623218060 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.624483109 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.624564886 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.624586105 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.624918938 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.624924898 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.625210047 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.625241041 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.625626087 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.625631094 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.741144896 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.742094994 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.742183924 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.742216110 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.742228031 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.742238998 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.742244005 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.745438099 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.745526075 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.745634079 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.745836973 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.745874882 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.760531902 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.760956049 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.761029959 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.761053085 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.761079073 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.761133909 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.761166096 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.761176109 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.761192083 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.761198997 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.763309956 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.763331890 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.763396978 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.763501883 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.763514996 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.763525009 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.763613939 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.763729095 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.763751984 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.763751984 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.763765097 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.763773918 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.765754938 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.765803099 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:21.765894890 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.766017914 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:21.766050100 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.211816072 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.212497950 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.212559938 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.212948084 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.212965012 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.243992090 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.244363070 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.244374990 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.244707108 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.244710922 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.351021051 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.351532936 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.351614952 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.351670027 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.351702929 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.351752043 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.351767063 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.354532003 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.354577065 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.354665995 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.355212927 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.355226040 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.383249044 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.383308887 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.383507967 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.383538008 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.383548021 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.383558989 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.383563995 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.385730028 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.385771036 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.385840893 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.385960102 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.385977030 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.502777100 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.503302097 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.503324032 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.503767014 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.503774881 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.524445057 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.524929047 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.524945974 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.525453091 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.525456905 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.531404018 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.531687021 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.531711102 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.532011986 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.532018900 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.638212919 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.638278961 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.638333082 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.638602972 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.638613939 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.638626099 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.638632059 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.642364025 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.642400026 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.642509937 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.642945051 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.642963886 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.660495996 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.660655975 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.660720110 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.660948038 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.660953045 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.660963058 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.660965919 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.665178061 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.665194035 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.665260077 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.665424109 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.665437937 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.669034004 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.669181108 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.669255018 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.669408083 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.669419050 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.669430971 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.669436932 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.671451092 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.671468019 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:22.671535015 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.671648026 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:22.671662092 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.130244970 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.130959988 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.130975962 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.131350040 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.131354094 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.138772011 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.139024019 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.139051914 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.139319897 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.139326096 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.270420074 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.270590067 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.270845890 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.270900011 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.270900011 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.270912886 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.270920992 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.273886919 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.273929119 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.274010897 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.274185896 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.274202108 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.279407978 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.279478073 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.279611111 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.279674053 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.279717922 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.279731035 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.279741049 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.279746056 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.282021046 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.282068014 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.282150984 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.282274961 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.282286882 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.390322924 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.390882969 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.390892029 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.391335011 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.391340017 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.434369087 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.436743975 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.436758995 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.437220097 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.437223911 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.438636065 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.439816952 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.439841986 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.440213919 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.440224886 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.525762081 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.525835037 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.525952101 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.526427984 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.526427984 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.526438951 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.526447058 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.529478073 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.529494047 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.529581070 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.529742956 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.529747963 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.570894957 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.571286917 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.571400881 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.571535110 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.571542978 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.571585894 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.571589947 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.573227882 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.573385954 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.573468924 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.573642015 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.573642015 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.573669910 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.573692083 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.574433088 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.574469090 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.574537992 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.574687004 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.574700117 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.575727940 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.575810909 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:23.576025963 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.576025963 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:23.576105118 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.031177998 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.032779932 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.032807112 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.033272982 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.033277988 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.042642117 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.043590069 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.043628931 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.044054031 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.044066906 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.166162014 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.166208982 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.166274071 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.166289091 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.166330099 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.166378021 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.166578054 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.166594982 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.166604996 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.166610003 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.169429064 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.169469118 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.169534922 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.169806004 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.169819117 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179519892 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179605007 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179687023 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.179702044 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179743052 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179897070 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.179917097 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179939032 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.179939032 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.179948092 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.179956913 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.182672024 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.182760954 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.182838917 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.182992935 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.183029890 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.301958084 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.302638054 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.302674055 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.303143024 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.303150892 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.339793921 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.339909077 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.340550900 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.340579033 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.340801954 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.340888977 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.341216087 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.341231108 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.341530085 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.341535091 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.439392090 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.439481020 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.439568043 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.439642906 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.439904928 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.439919949 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.439932108 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.439937115 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.443859100 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.443892956 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.443991899 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.444181919 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.444209099 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.475846052 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476083040 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476142883 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476279974 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476300001 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.476475000 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476521969 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.476551056 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.476567984 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476572990 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.476586103 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476599932 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.476604939 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.476608992 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.476624966 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.479351997 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.479392052 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.479531050 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.479645014 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.479671955 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.479881048 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.479918957 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.479995966 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.480161905 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.480190039 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.928687096 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.929339886 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.929425001 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.929847002 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.929861069 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.935141087 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.935796022 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.935817957 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:24.936697960 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:24.936702967 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.064383984 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.064443111 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.064711094 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.064774036 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.064816952 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.064964056 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.065174103 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.065206051 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.070043087 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.070136070 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.070291042 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.070436954 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.070467949 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.079525948 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.079670906 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.079744101 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.079814911 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.079830885 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.079854965 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.079862118 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.082479000 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.082516909 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.082639933 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.082878113 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.082905054 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.224065065 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.224642038 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.224673033 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.225188017 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.225200891 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.241564989 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.242012978 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.242101908 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.242347002 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.242362976 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.250278950 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.250597000 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.250655890 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.250910997 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.250925064 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.363025904 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.363078117 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.363197088 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.363420963 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.363490105 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.363590956 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.363636017 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.363666058 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.363682032 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.367295980 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.367321014 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.367660046 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.367660046 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.367685080 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.381555080 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.381633997 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.381771088 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.382047892 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.382059097 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.382091999 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.382102013 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.385600090 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.385641098 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.385868073 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.386099100 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.386113882 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.388197899 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.388272047 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.388385057 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.388519049 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.388592958 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.388637066 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.388669968 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.388685942 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.391561031 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.391567945 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.391691923 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.391815901 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.391829014 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.828247070 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.828947067 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.829030037 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.829438925 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.829453945 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.841914892 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.842262030 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.842288017 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.842638969 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.842657089 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.964080095 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.964238882 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.964435101 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.964512110 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.964557886 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.964591026 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.964607954 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.967772007 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.967818975 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.967911959 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.968125105 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.968143940 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.977925062 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.978080988 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.978156090 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.978212118 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.978212118 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.978228092 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.978240967 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.981138945 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.981178999 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:25.981266975 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.981488943 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:25.981506109 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.131222010 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.132051945 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.132060051 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.132556915 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.132561922 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.140090942 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.140618086 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.140634060 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.140966892 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.140994072 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.165982008 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.168692112 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.168699980 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.169126987 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.169131994 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.267414093 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.267453909 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.267509937 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.267602921 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.267642021 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.267945051 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.267966032 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.267978907 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.267985106 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.271821022 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.271907091 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.272031069 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.272257090 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.272289038 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.298639059 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.298721075 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.298803091 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.299026012 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.299048901 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.299073935 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.299082041 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.301690102 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.301721096 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.301870108 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.302046061 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.302061081 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.303479910 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.303644896 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.303689957 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.303694010 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.303739071 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.303841114 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.303852081 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.303881884 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.303891897 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.306344032 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.306358099 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.306436062 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.306622028 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.306632996 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.709367990 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.709995031 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.710036993 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.710479975 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.710493088 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.742584944 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.744865894 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.744893074 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.745385885 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.745393991 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.843290091 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.843394995 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.843473911 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.843805075 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.843825102 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.843839884 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.843863964 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.847147942 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.847187996 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.847311020 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.847543955 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.847560883 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.879273891 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.879370928 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.879479885 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.879482031 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.879549026 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.879776001 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.879790068 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.879800081 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.879805088 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.882834911 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.882867098 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:26.882949114 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.883120060 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:26.883131027 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.047739983 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.048242092 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.048252106 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.048733950 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.048741102 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.060106039 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.062488079 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.062505007 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.062952995 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.062958002 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.069135904 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.069533110 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.069542885 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.069952965 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.069957972 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.181195021 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.181372881 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.181442976 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.181534052 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.181550026 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.181560993 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.181566000 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.184351921 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.184405088 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.184632063 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.184820890 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.184848070 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.199157000 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.199224949 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.199279070 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.199279070 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.199429989 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.199446917 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.199457884 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.199465990 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.201983929 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.202001095 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.202069998 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.202187061 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.202198029 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.205573082 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.205710888 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.205760002 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.205801010 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.205806017 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.205816031 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.205821037 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.207886934 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.207907915 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.207977057 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.208080053 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.208092928 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.586944103 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.591521978 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.591550112 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.591939926 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.591958046 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.650676966 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.651304960 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.651339054 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.652362108 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.652368069 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.720940113 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.721087933 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.721216917 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.721402884 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.721402884 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.721426964 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.721441031 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.724258900 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.724283934 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:27.724354982 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.724498987 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:27.724509001 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.008846998 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.009008884 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.009186983 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.009216070 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.009234905 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.009248972 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.009253979 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.012197971 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.012275934 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.012353897 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.012487888 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.012521029 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.144599915 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.149122000 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.151612997 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.178858995 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.178868055 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.179359913 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.179364920 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.179603100 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.179640055 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.179960012 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.179971933 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.180207968 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.180221081 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.180583954 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.180588961 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.310563087 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.310647011 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.310890913 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.310921907 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.310921907 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.310935974 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.310945034 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.311669111 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.311738014 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.311820030 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.311846972 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.311877012 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.311929941 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.312012911 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.312012911 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.312033892 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.312053919 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314016104 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314044952 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314095974 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314122915 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314183950 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314280033 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314306021 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314316988 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314327955 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314389944 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314431906 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314487934 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314502001 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314543962 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314558983 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314685106 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314693928 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.314702988 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.314730883 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.316590071 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.316610098 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.316695929 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.316811085 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.316837072 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.492816925 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.493506908 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.493529081 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.494045019 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.494050026 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.636348963 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.636429071 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.636655092 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.636698008 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.636698008 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.636715889 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.636725903 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.639571905 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.639606953 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.639683962 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.639863968 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.639878035 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.773895979 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.774522066 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.774583101 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.775007963 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.775022030 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.913017035 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.913094997 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.913208961 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.913240910 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.913278103 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.913460970 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.913506031 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.913537025 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.913552999 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.916932106 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.916975975 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:28.917046070 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.917217016 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:28.917236090 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.069422960 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.069952965 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.070014000 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.070429087 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.070442915 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.097489119 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.097971916 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.097981930 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.098732948 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.098737955 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.206521988 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.206810951 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.206875086 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.208003998 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.208003998 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.208074093 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.208126068 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.212212086 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.212260008 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.212358952 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.212502956 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.212524891 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238018036 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238178015 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238224983 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.238239050 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238282919 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238322973 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.238342047 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238353014 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.238353014 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.238359928 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.238365889 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.240751982 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.240784883 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.240863085 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.240988970 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.241015911 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.401531935 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.445615053 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.450155973 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.458493948 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.458519936 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.458995104 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.459013939 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.459839106 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.459899902 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.460108042 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.460124016 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.591792107 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.591840029 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.591902971 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.591932058 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.591968060 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.592017889 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.592657089 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.592828989 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.592999935 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.595246077 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.595278978 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.595293045 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.595299006 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.602019072 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.602019072 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.602087021 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.602118969 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.622409105 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.622473955 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.622647047 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.628689051 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.628724098 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.629340887 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.629374981 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.629451990 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.629548073 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.629556894 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.658931971 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.689963102 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.690006971 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.690520048 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.690534115 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.819433928 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.819462061 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.819513083 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.819539070 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.819586992 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.819833040 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.819858074 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.819874048 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.819881916 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.822999954 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.823043108 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.823117018 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.823278904 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.823295116 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.965966940 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.966697931 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.966753006 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.967351913 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.967365980 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.981987000 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.982594967 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.982656956 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:29.983032942 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:29.983046055 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.102770090 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.102796078 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.102861881 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.102977991 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.103296041 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.103332996 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.103368998 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.103384018 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.106880903 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.106899977 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.107076883 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.107223988 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.107240915 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.116534948 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.116699934 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.116816998 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.116893053 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.116893053 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.116935015 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.116962910 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.119652033 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.119678974 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.119884014 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.119925976 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.119931936 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.391542912 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.392355919 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.392381907 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.392829895 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.392833948 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.406318903 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.406675100 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.406740904 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.407073021 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.407087088 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.525937080 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.526092052 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.526376963 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.526598930 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.526598930 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.526617050 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.526624918 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.529863119 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.529908895 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.530013084 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.530204058 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.530217886 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.547128916 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.547334909 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.547470093 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.547532082 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.547586918 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.547626972 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.547626972 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.547657013 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.547686100 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.550299883 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.550347090 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.550425053 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.550554991 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.550570965 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.585793972 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.586781025 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.586781025 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.586792946 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.586807013 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.723711967 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.723783016 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.723926067 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.723963976 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.724061012 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.724217892 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.724219084 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.724236012 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.724251986 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.727675915 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.727725983 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.727822065 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.728013992 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.728030920 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.872107029 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.873955965 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.873992920 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.874470949 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.874478102 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.892219067 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.892776966 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.892788887 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:30.893270969 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:30.893275023 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.011497974 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.011571884 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.011624098 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.011934042 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.011950016 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.011960030 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.011965036 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.016711950 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.016772032 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.016848087 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.017050028 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.017077923 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.033730984 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.033808947 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.033924103 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.034045935 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.034045935 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.034245014 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.034245014 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.034257889 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.034266949 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.042749882 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.042773008 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.042845964 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.043036938 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.043052912 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.305378914 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.305798054 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.306083918 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.306112051 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.306267977 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.306328058 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.306619883 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.306626081 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.306669950 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.306684971 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.441041946 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.441122055 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.441241026 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.441319942 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.441319942 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.441509008 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.441559076 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.441590071 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.441606045 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.443156958 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.443367004 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.443440914 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.443480968 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.443502903 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.443515062 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.443520069 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.445008039 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.445048094 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.445120096 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.445265055 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.445280075 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.445622921 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.445710897 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.445787907 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.445926905 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.445957899 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.495157957 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.495982885 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.495995998 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.496485949 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.496490955 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.635595083 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.635762930 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.635823011 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.635947943 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.635958910 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.635970116 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.635973930 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.639225960 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.639264107 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.639329910 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.639491081 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.639504910 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.766979933 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.767505884 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.767515898 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.767956972 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.767963886 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.815124989 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.815603971 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.815625906 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.815972090 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.815982103 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.902460098 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.902565956 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.902791977 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.903129101 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.903146982 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.903167963 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.903179884 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.906270027 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.906286955 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.906361103 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.906503916 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.906521082 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.954828024 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.954868078 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.954921961 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.954937935 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.954974890 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.955149889 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.955149889 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.955168962 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.955190897 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.958146095 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.958189011 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:31.958277941 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.958456993 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:31.958484888 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.212785006 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.213484049 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.213510990 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.213968039 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.213980913 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.222635031 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.223063946 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.223156929 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.223414898 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.223428965 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.349792957 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.349992037 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.350055933 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.350172043 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.350192070 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.350204945 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.350210905 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.353339911 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.353410006 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.353486061 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.353634119 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.353657007 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.360976934 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.361145973 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.361218929 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.361365080 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.361366034 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.361402988 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.361426115 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.363781929 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.363846064 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.363924026 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.364072084 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.364094973 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.411292076 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.412699938 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.412734032 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.413157940 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.413166046 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.551645994 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.551733017 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.551841021 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.551919937 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.552108049 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.552125931 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.552138090 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.552145004 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.555475950 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.555497885 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.555578947 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.555783033 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.555795908 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.652218103 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.653070927 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.653101921 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.653633118 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.653645992 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.715296030 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.715993881 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.716013908 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.716470003 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.716480970 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.788258076 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.788397074 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.788619041 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.788650036 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.788666010 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.788690090 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.788697004 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.791726112 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.791785002 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.791862965 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.791994095 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.792016029 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.854132891 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.854208946 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.854310036 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.854403973 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.854456902 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.854743958 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.854763985 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.854788065 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.854799986 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.858035088 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.858077049 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:32.858156919 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.858340979 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:32.858354092 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.106362104 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.107507944 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.107563019 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.107906103 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.107914925 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.136765957 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.137588978 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.137626886 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.138277054 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.138290882 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.243890047 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.243973017 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.244117975 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.244550943 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.244584084 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.244616985 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.244626045 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.247926950 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.247976065 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.248075962 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.248255014 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.248272896 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.276840925 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.277050972 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.277183056 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.277502060 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.277502060 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.277539968 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.277565002 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.280911922 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.280963898 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.281099081 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.281290054 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.281313896 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.542993069 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.543513060 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.543545008 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.544080019 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.544087887 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.627258062 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.627867937 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.627892971 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.628369093 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.628380060 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.678257942 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.678412914 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.678473949 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.678750038 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.678771019 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.678786993 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.678795099 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.681938887 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.681951046 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.682008982 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.682202101 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.682214975 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.779664040 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.779747009 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.779799938 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.780034065 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.780052900 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.780066013 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.780071974 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.783688068 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.783734083 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.783823967 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.784105062 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.784141064 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.793735981 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.798070908 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.798083067 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.798588991 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.798594952 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.934751987 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.934818029 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.934875011 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.934895992 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.934933901 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.944996119 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.945008993 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.945053101 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.945060968 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.947808027 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.947854042 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.947940111 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.948110104 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:33.948128939 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:33.975322962 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:33.975369930 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:33.975537062 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:33.976799011 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:33.976821899 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:34.008742094 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.009341955 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.009376049 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.009921074 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.009927034 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.053913116 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.054611921 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.054675102 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.054955006 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.054970026 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.144571066 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.144639969 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.144745111 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.144778013 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.144810915 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.144964933 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.145127058 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.145148993 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.145164013 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.145170927 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.148118973 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.148159981 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.148320913 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.148464918 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.148478985 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.193341970 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.193435907 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.193506002 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.193675995 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.193675995 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.193697929 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.193718910 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.197350025 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.197385073 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.197472095 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.197635889 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.197649002 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.461412907 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.461971045 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.462011099 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.462446928 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.462456942 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.572622061 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.573617935 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.573657036 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.574290991 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.574302912 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.601627111 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.601655006 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.601701975 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.601861954 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.602175951 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.602175951 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.602200985 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.602226973 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.605520010 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.605554104 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.605640888 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.605808973 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.605822086 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.702785015 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.703516960 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.703553915 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.703969002 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.703978062 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.712120056 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.712266922 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.712551117 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.712605953 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.712605953 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.712632895 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.712646008 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.715831995 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.715854883 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.715946913 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.716089964 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.716101885 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.822083950 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:34.822194099 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:34.823709965 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:34.823729038 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:34.824117899 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:34.825825930 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:34.842257977 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.842606068 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.842665911 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.842792034 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.842818975 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.842833042 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.842840910 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.846534967 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.846580982 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.846651077 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.846884966 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.846901894 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.867338896 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:34.902949095 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.903603077 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.903626919 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.904103041 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.904108047 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.953063011 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.953704119 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.953718901 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:34.954082966 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:34.954097033 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.040596008 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.040690899 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.040746927 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.040980101 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.040992975 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.041014910 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.041019917 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.044672966 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.044781923 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.044867992 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.045187950 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.045217037 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.090372086 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.090537071 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.090596914 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.090651989 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.090651989 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.090922117 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.090922117 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.090940952 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.090950966 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.093934059 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.093976974 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.094068050 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.094202995 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.094213009 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.105979919 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.106007099 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.106023073 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.106085062 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.106105089 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.106168032 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.108361959 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.108402967 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.108450890 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.108452082 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.108509064 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.108509064 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.109828949 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.109852076 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.109864950 CEST	49944	443	192.168.2.5	20.12.23.50
Oct 24, 2024 16:18:35.109869957 CEST	443	49944	20.12.23.50	192.168.2.5
Oct 24, 2024 16:18:35.364244938 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.364901066 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.364917040 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.365381956 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.365386963 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.488379955 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.489134073 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.489207029 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.489787102 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.489803076 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.501607895 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.501684904 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.501743078 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.504779100 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.504786015 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.504810095 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.504820108 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.514851093 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.514908075 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.514990091 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.516257048 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.516278982 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.604263067 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.604979992 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.605016947 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.605483055 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.605496883 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.631908894 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.631990910 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.632081032 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.632143974 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.632181883 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.632232904 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.632416010 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.632452011 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.632479906 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.632494926 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.635741949 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.635773897 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.635997057 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.636086941 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.636100054 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.741920948 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.742007017 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.742086887 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.742321968 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.742347956 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.742367983 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.742376089 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.745630980 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.745677948 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.745971918 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.745971918 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.746012926 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.805444002 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.806171894 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.806288004 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.806677103 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.806694984 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.834229946 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.834911108 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.834983110 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.835489035 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.835505962 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.944355011 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.944396019 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.944461107 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.944494009 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.944552898 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.944875956 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.944901943 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.944919109 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.944926023 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.948379993 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.948432922 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.948523045 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.948709965 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.948721886 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.969867945 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.969945908 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.970071077 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.970313072 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.970313072 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.970362902 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.970391989 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.973031044 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.973087072 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:35.973161936 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.973294020 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:35.973311901 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.272245884 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.273008108 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.273025990 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.273545980 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.273550987 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.377873898 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.378664970 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.378688097 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.379601002 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.379606962 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.423825979 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.423892021 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.424031019 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.424420118 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.424420118 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.424437046 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.424448013 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.427385092 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.427428007 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.427510023 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.427669048 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.427689075 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.510520935 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.510603905 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.510890007 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.510909081 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.510917902 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.510927916 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.510932922 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.513802052 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.514772892 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.514822006 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.514914036 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.515328884 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.515346050 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.515830994 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.515847921 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.515942097 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.515947104 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.653919935 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.653951883 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.654001951 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.654103041 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.654237986 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.654544115 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.654544115 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.654556036 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.654566050 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.658185005 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.658205032 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.658322096 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.658530951 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.658546925 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.699595928 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.700383902 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.700414896 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.700944901 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.700954914 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.733364105 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.734205008 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.734266996 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.734709024 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.734719038 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.836492062 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.836594105 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.836678982 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.836980104 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.836998940 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.837013960 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.837018967 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.840481043 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.840529919 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.840807915 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.841048956 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.841064930 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.871530056 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.871617079 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.871728897 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.874460936 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.874495983 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.874516010 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.874524117 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.877657890 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.877691031 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:36.877924919 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.878082037 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:36.878098965 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.173630953 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.174413919 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.174444914 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.175081015 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.175087929 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.266233921 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.267066002 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.267097950 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.267661095 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.267677069 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.309170008 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.309237003 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.309745073 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.309745073 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.309745073 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.320744991 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.320785046 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.321094036 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.321248055 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.321259022 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.403417110 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.403500080 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.403738976 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.403907061 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.403928041 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.403943062 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.403950930 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.404648066 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.406781912 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.406805992 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.407412052 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.407418966 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.407510996 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.407547951 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.407618999 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.407759905 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.407776117 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.540618896 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.540735960 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.540790081 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.540980101 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.540997982 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.541012049 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.541018963 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.545053005 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.545094967 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.545161963 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.545485020 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.545497894 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.598659992 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.599231005 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.599256992 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.599875927 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.599894047 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.621984959 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.622014046 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.636914015 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.637447119 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.637464046 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.638037920 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.638041973 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.736263037 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.736355066 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.736690044 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.736809969 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.736809969 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.736829996 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.736841917 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.740238905 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.740309000 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:37.740402937 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.740601063 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:37.740619898 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.016719103 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.016809940 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.016865969 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.017333031 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.017359972 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.017375946 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.017385006 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.022384882 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.022479057 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.022561073 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.022780895 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.022813082 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.154819965 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.155189991 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.156948090 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.156959057 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.160540104 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.160546064 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.160913944 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.160938025 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.163305998 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.163312912 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.299801111 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.299870014 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.299921989 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.301135063 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.301165104 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.301213980 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.301224947 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.301327944 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.301723003 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.301737070 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.309562922 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.328438044 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.328474045 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.331130981 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.331144094 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.339530945 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.339541912 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.349659920 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.349710941 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.349791050 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.350491047 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.350526094 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.351648092 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.351675987 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.351733923 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.351934910 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.351952076 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.463701010 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.464071035 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.464104891 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.464287043 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.464394093 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.464428902 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.464452982 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.464467049 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.467988014 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.468027115 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.468264103 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.468453884 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.468468904 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.503382921 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.504466057 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.504545927 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.505367994 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.505383968 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.641717911 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.641886950 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.642000914 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.642394066 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.642430067 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.642457008 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.642471075 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.646111965 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.646153927 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.646248102 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.646429062 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.646447897 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.766824961 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.767517090 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.767581940 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.768134117 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.768147945 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.899369955 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.899401903 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.899451971 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.899578094 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.899578094 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.899756908 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.899777889 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.899800062 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.899816036 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.907280922 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.907335997 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:38.907497883 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.907815933 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:38.907840967 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.112673998 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.113377094 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.113399029 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.114173889 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.114181042 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.117976904 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.118544102 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.118590117 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.118983984 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.118999004 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.221369982 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.222290993 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.222312927 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.222732067 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.222747087 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.252074003 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.252232075 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.252299070 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.252794981 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.252805948 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.259176016 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.259215117 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.259325027 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.259504080 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.259531975 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.261833906 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.261888981 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.261941910 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.262063980 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.262089014 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.262115002 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.262128115 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.264647961 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.264659882 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.264733076 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.264866114 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.264874935 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.359067917 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.359364033 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.359450102 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.359618902 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.359621048 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.359648943 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.359659910 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.362772942 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.362863064 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.362971067 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.363152027 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.363183022 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.409215927 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.409816980 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.409842014 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.410358906 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.410366058 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.550405979 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.550478935 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.550527096 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.550545931 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.550596952 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.550643921 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.550779104 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.550793886 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.550802946 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.550808907 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.553586960 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.553631067 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.553708076 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.553849936 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.553858042 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.665468931 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.666124105 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.666148901 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.666718960 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.666734934 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.804223061 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.804312944 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.804398060 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.804667950 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.804688931 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.804714918 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.804727077 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.808156967 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.808187962 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:39.808269024 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.808470964 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:39.808484077 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.009919882 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.010626078 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.010646105 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.011152029 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.011166096 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.016952991 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.017420053 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.017441034 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.017996073 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.018007040 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.117630959 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.118815899 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.118843079 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.119407892 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.119419098 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.146122932 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.146287918 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.146373034 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.146817923 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.146848917 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.146874905 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.146888971 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.151119947 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.151150942 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.151273012 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.151484966 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.151496887 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.154587984 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.154612064 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.154666901 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.154685974 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.154721022 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.154920101 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.154946089 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.154968977 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.154980898 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.158137083 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.158155918 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.158226967 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.158380032 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.158394098 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.255530119 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.255690098 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.255891085 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.255975962 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.255976915 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.256021023 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.256048918 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.259170055 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.259207010 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.259278059 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.259417057 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.259432077 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.309453964 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.310425043 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.310441971 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.311124086 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.311131001 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.442435026 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.442487001 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.442854881 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.442887068 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.442989111 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.443002939 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.443013906 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.443175077 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.446207047 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.446254015 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.446330070 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.446471930 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.446486950 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.564094067 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.564696074 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.564718008 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.565206051 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.565211058 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.700721025 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.700743914 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.700819016 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.700834990 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.700867891 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.701172113 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.701172113 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.701189995 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.701199055 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.704514980 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.704597950 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.704698086 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.704873085 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.704906940 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.914222002 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.914885998 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.914926052 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.915380955 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.915385962 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.919907093 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.920221090 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.920234919 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:40.920552969 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:40.920557976 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.015940905 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.020910025 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.020925045 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.021637917 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.021642923 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.051517963 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.051548004 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.051604986 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.051606894 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.051786900 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.051973104 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.051985025 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.051994085 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.051999092 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.055119038 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.055156946 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.055232048 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.055377960 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.055393934 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.057852030 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.057876110 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.057921886 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.057924986 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.058084965 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.058129072 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.058145046 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.058156967 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.058161020 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.060642958 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.060681105 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.060740948 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.060909033 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.060926914 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.155541897 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.155654907 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.155870914 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.155903101 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.155917883 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.155944109 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.155950069 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.158821106 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.158868074 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.158938885 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.159070969 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.159090042 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.207987070 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.208973885 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.208991051 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.209494114 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.209501982 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.346633911 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.346710920 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.346827984 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.347160101 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.347160101 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.347172976 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.347184896 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.350485086 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.350513935 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.350614071 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.350804090 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.350824118 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.448386908 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.451049089 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.451102972 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.451514006 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.451523066 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.584557056 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.584729910 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.585055113 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.585055113 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.585055113 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.588396072 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.588438034 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.588530064 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.588752031 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.588788033 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.804563999 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.805268049 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.805300951 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.805712938 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.805808067 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.805815935 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.806078911 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.806102037 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.806508064 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.806514025 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.887778044 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.887840033 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.910412073 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.911165953 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.911191940 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.911792040 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.911847115 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.940967083 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.941131115 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.941222906 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.941405058 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.941423893 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.941442013 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.941447973 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.942642927 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.942665100 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.942737103 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.942872047 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.942873001 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.943041086 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.943098068 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.943133116 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.943150043 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.944874048 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.944895029 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.945002079 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.945163965 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.945183039 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.945480108 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.945508957 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:41.945578098 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.945712090 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:41.945724010 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.046569109 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.046602964 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.046700001 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.046766996 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.046952963 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.047122955 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.071440935 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.071471930 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.071491957 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.071500063 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.077239990 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.077359915 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.077442884 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.077914953 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.077953100 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.113368034 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.113897085 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.113923073 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.114447117 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.114454031 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.351949930 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.352672100 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.352735996 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.353147030 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.353162050 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.375787020 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.375811100 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.375825882 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.375909090 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.375921011 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.375974894 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.376703024 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.376771927 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.376775980 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.376822948 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.376835108 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.376863956 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.376868963 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.386169910 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.386215925 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.386329889 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.386472940 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.386487961 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.494811058 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.494862080 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.495002985 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.495028973 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.495136023 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.495475054 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.495538950 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.495573044 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.495589018 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.498919964 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.498964071 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.499034882 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.499181986 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.499195099 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.708959103 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.709456921 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.709480047 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.709964037 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.709974051 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.720087051 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.729127884 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.729140043 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.729868889 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.729875088 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.854294062 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.854851007 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.854870081 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.855376959 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.855382919 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.891978979 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.892054081 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.892216921 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.892244101 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.892318010 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.892750025 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.892756939 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.892776012 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.893125057 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.893213034 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.893280983 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.896059990 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.896111012 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.896222115 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.896406889 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.896420002 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.971493006 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.971518040 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.971544027 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.971654892 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:42.971671104 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:42.971724033 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.002856970 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.002883911 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.002962112 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.003087997 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.003087997 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.003456116 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.003464937 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.003478050 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.003484964 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.006922007 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.006954908 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.007052898 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.007214069 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.007241964 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.087270975 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.087343931 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.087362051 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.087387085 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.087465048 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.089242935 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.089253902 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.089262962 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.089266062 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.092922926 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.092967987 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.093173981 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.093430996 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.093457937 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.137594938 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.141021013 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.141037941 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.141655922 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.141661882 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.250278950 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.251292944 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.251327991 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.251790047 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.251799107 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.277851105 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.277925968 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.278055906 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.278444052 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.278461933 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.278475046 CEST	49990	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.278481960 CEST	443	49990	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.281539917 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.281605005 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.281784058 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.281910896 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.281944036 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.386029005 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.386676073 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.386746883 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.386802912 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.386822939 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.386842012 CEST	49991	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.386848927 CEST	443	49991	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.390908003 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.390949965 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.391100883 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.391484022 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.391496897 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.651392937 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.652120113 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.652143002 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.652647018 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.652666092 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.759030104 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.759988070 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.760015965 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.760502100 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.760513067 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.786295891 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.786462069 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.786549091 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.786797047 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.786824942 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.786839008 CEST	49992	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.786847115 CEST	443	49992	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.789689064 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.789707899 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.789798021 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.789985895 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.790003061 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.841082096 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.841691971 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.841717958 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.842164993 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.842185020 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.896521091 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.896589041 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.896672010 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.896858931 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.896876097 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.896898985 CEST	49993	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.896908998 CEST	443	49993	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.899998903 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.900039911 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.900126934 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.900306940 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.900333881 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.977083921 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.978996038 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.979034901 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.979130983 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.979300976 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.979398966 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.979423046 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:43.979434967 CEST	49994	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:43.979444027 CEST	443	49994	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.038060904 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.038975000 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.038997889 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.039681911 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.039695024 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.143394947 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.143934011 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.143946886 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.144476891 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.144483089 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.174829006 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.175005913 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.175075054 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.175199032 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.175226927 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.175250053 CEST	49995	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.175261974 CEST	443	49995	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.300103903 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.300309896 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.300371885 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.300580025 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.300580025 CEST	49996	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.300595045 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.300602913 CEST	443	49996	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.566334963 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.567008018 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.567034960 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.567481995 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.567487955 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.673409939 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.674029112 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.674052954 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.674721003 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.674726009 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.712901115 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.713064909 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.713120937 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.713247061 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.713264942 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.713274956 CEST	49997	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.713283062 CEST	443	49997	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.815795898 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.816267967 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.816349030 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.816406012 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.816406012 CEST	49998	443	192.168.2.5	13.107.253.72
Oct 24, 2024 16:18:44.816426039 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:44.816436052 CEST	443	49998	13.107.253.72	192.168.2.5
Oct 24, 2024 16:18:47.930346966 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:47.930543900 CEST	50003	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:47.935791016 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:47.935887098 CEST	80	50003	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:47.935889006 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:47.936059952 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:47.936317921 CEST	50003	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:47.941680908 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.797976971 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.798026085 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.798070908 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.798156023 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:48.798186064 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.798202991 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.798320055 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:48.798363924 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.798413038 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:48.798428059 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:48.841737032 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:48.847194910 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:49.092569113 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:49.092700005 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:49.092833042 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:50.378232002 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:50.378267050 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:50.378459930 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:50.378671885 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:50.378686905 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:50.501837015 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:50.507853985 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:50.713570118 CEST	49746	443	192.168.2.5	23.1.237.91
Oct 24, 2024 16:18:50.713596106 CEST	443	49746	23.1.237.91	192.168.2.5
Oct 24, 2024 16:18:50.755412102 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:50.755757093 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:50.755825043 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:51.232315063 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:51.246413946 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:51.246427059 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:51.247445107 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:51.247555971 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:51.248732090 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:51.248799086 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:51.289763927 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:51.289777994 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:18:51.336623907 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:18:51.830750942 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:51.830837965 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:51.831090927 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:51.831424952 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:51.831440926 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.599922895 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.599989891 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.601577044 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.601583004 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.601900101 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.603652954 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.651334047 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.863620996 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.863673925 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.863723040 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.863756895 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.863782883 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.863801956 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.863836050 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.982398987 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.982450008 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.982508898 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.982533932 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:52.982566118 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:52.982588053 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.101994038 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.102046013 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.102114916 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.102137089 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.102166891 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.102185011 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.221041918 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.221096039 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.221147060 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.221179008 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.221194983 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.221235037 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.340516090 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.340540886 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.340589046 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.340604067 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.340630054 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.340648890 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.459645987 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.459677935 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.459774971 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.459801912 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.459999084 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.579385996 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.579437017 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.579485893 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.579493046 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.579554081 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.698030949 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.698081017 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.698139906 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.698206902 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.698245049 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.698410988 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.699652910 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.699701071 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.699733019 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.699753046 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.699785948 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.699892044 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.818689108 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.818741083 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.818809032 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.818865061 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.818900108 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.819039106 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.937434912 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.937494040 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.937572956 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.937645912 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:53.937685966 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:53.937716007 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.056118965 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.056154966 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.056212902 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.056284904 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.056325912 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.056377888 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.057388067 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.057409048 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.057449102 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.057496071 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.057516098 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.057571888 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.176165104 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.176187992 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.176280022 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.176305056 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.176376104 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.301489115 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.301538944 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.301608086 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.301632881 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.301650047 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.301719904 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.301765919 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.301784039 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.301827908 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.301832914 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.301861048 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.301875114 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.420933008 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.420981884 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.421025038 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.421047926 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.421087027 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.421117067 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.532921076 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.532969952 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.533030987 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.533055067 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.533071995 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.533107042 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.540508032 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.540570021 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.540656090 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.540656090 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.540719986 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.540772915 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.660401106 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.660419941 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.660506010 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.660528898 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.660578012 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.661384106 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.661400080 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.661461115 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.661465883 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.661503077 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.661523104 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.779721022 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.779750109 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.779815912 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.779882908 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.779922009 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.779946089 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.780818939 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.780838966 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.780889988 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.780896902 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.780932903 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.780952930 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.898993969 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.899018049 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.899143934 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.899166107 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.899400949 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.900434971 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.900454998 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.900506020 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.900511980 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:54.900568962 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:54.900569916 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.018467903 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.018491030 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.018639088 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.018639088 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.018662930 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.018837929 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.019623995 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.019654036 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.019819021 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.019833088 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.019949913 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.137429953 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.137454033 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.137619019 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.137680054 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.137845993 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.138592958 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.138603926 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.138748884 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.138761997 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.138839960 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.250020981 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.250039101 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.250230074 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.250230074 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.250253916 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.250351906 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.257714033 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.257731915 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.258053064 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.258070946 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.258538008 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.301587105 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.301605940 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.301700115 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.301700115 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.301717997 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.301990032 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.376337051 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.376354933 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.376559019 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.376583099 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.376790047 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.377599955 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.377614975 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.377706051 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.377720118 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.377928972 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.495397091 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.495414019 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.495599031 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.495621920 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.495752096 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.496222019 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.496239901 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.496432066 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.496444941 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.496548891 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.579193115 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.579211950 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.579334974 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.579356909 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.579617977 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.615027905 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.615044117 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.615405083 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.615468025 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.615578890 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.616024017 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.616039991 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.616199970 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.616206884 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.616630077 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985059023 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985070944 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985104084 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985155106 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985232115 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985260963 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985367060 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985395908 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985413074 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985455990 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985471010 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985491991 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985570908 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985903978 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985919952 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.985964060 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.985975027 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.986005068 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.986099958 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.986129999 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.986145973 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.986185074 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.986196041 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.986222982 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.986293077 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.986958981 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.986975908 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.987060070 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.987072945 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.987160921 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.991271019 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.991287947 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.991350889 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.991365910 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.991429090 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.992202044 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.992218018 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.992305040 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.992316961 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.992510080 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.993510962 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.993525982 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.993592024 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:55.993603945 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:55.993659973 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.017285109 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.017301083 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.017338991 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.017344952 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.017373085 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.017393112 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.092767000 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.092782021 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.092854023 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.092875957 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.092931986 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.093384981 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.093400955 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.093456984 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.093470097 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.093502045 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.093584061 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.136122942 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.136143923 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.136209011 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.136235952 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.136260986 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.136284113 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.211679935 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.211697102 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.211767912 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.211777925 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.211812019 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.212527990 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.212541103 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.212610960 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.212615013 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.212706089 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.213325977 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.213339090 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.213378906 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.213382959 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.213413954 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.213428020 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.296613932 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.296633005 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.296713114 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.296737909 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.296917915 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.331132889 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.331150055 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.331226110 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.331232071 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.331271887 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.332351923 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.332366943 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.332433939 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.332438946 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.332540989 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.375025034 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.375041962 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.375114918 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.375130892 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.375228882 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.450052023 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.450076103 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.450139046 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.450169086 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.450181007 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.450227976 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.450956106 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.450972080 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.451035976 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.451050043 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.451103926 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.451960087 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.451977015 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.452016115 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.452028036 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.452054977 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.452112913 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.494292021 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.494311094 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.494378090 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.494395018 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.494477034 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.569647074 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.569667101 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.569758892 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.569828987 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.569892883 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.570691109 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.570709944 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.570775032 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.570791006 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.570831060 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.570914984 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.571508884 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.571526051 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.571602106 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.571615934 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.571772099 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.613857031 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.613874912 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.613948107 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.614013910 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.614073038 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.689055920 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.689074993 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.689147949 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.689220905 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.689286947 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.689286947 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.689995050 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.690063953 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.690099001 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.690105915 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.690138102 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.690156937 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.690258026 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.690258026 CEST	50013	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:18:56.690278053 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:56.690289974 CEST	443	50013	13.107.253.45	192.168.2.5
Oct 24, 2024 16:18:58.786323071 CEST	80	50003	217.160.0.56	192.168.2.5
Oct 24, 2024 16:18:58.786434889 CEST	50003	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:58.979762077 CEST	50003	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:18:58.985239983 CEST	80	50003	217.160.0.56	192.168.2.5
Oct 24, 2024 16:19:00.699965000 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:00.700001955 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:00.703191042 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:00.703341007 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:00.703356981 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.221837044 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:19:01.221906900 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:19:01.222009897 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:19:01.451278925 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.452559948 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:01.452583075 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.453656912 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:01.453665018 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588330984 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588355064 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588430882 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:01.588459015 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588725090 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588772058 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:01.588788986 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588804960 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:01.588805914 CEST	50014	443	192.168.2.5	13.107.253.45
Oct 24, 2024 16:19:01.588813066 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:01.588819981 CEST	443	50014	13.107.253.45	192.168.2.5
Oct 24, 2024 16:19:02.979248047 CEST	50011	443	192.168.2.5	142.250.184.196
Oct 24, 2024 16:19:02.979266882 CEST	443	50011	142.250.184.196	192.168.2.5
Oct 24, 2024 16:19:05.880470037 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:19:05.880570889 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:19:06.979032993 CEST	50002	80	192.168.2.5	217.160.0.56
Oct 24, 2024 16:19:06.984477997 CEST	80	50002	217.160.0.56	192.168.2.5
Oct 24, 2024 16:19:50.445521116 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:19:50.445569038 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:19:50.448733091 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:19:50.448733091 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:19:50.448776007 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:19:51.266299963 CEST	53671	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:19:51.271723032 CEST	53	53671	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:51.271791935 CEST	53671	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:19:51.271807909 CEST	53671	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:19:51.281594992 CEST	53	53671	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:51.307116032 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:19:51.307432890 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:19:51.307462931 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:19:51.308552027 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:19:51.309001923 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:19:51.309097052 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:19:51.352144957 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:19:51.872739077 CEST	53	53671	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:51.873888016 CEST	53671	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:19:51.881472111 CEST	53	53671	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:51.881521940 CEST	53671	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:20:01.794704914 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:01.794862986 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:01.794929028 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:01.948379993 CEST	50019	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:01.948407888 CEST	443	50019	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:50.494637966 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:50.494708061 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:50.494781017 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:50.495053053 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:50.495074987 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:51.357604980 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:51.357950926 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:51.357986927 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:51.359633923 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:51.359960079 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:20:51.360054016 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:20:51.414890051 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:01.348795891 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:01.348989964 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:01.349054098 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:02.978888988 CEST	53679	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:02.978923082 CEST	443	53679	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:50.557255030 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:50.557287931 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:50.557346106 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:50.557719946 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:50.557734966 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:51.407639027 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:51.412834883 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:51.412849903 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:51.413130999 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:51.418567896 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:21:51.418612957 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:21:51.493498087 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:01.404721022 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:01.404795885 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:01.412590981 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:02.980098963 CEST	53680	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:02.980129957 CEST	443	53680	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:50.620184898 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:50.620228052 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:50.620301962 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:50.620688915 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:50.620701075 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:51.746231079 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:51.749248028 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:51.749274969 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:51.750066042 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:51.750515938 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:22:51.750601053 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:22:51.808682919 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:23:02.679341078 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:23:02.679523945 CEST	443	53681	142.250.186.68	192.168.2.5
Oct 24, 2024 16:23:02.679588079 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:23:02.984697104 CEST	53681	443	192.168.2.5	142.250.186.68
Oct 24, 2024 16:23:02.984728098 CEST	443	53681	142.250.186.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 16:18:46.067001104 CEST	53	52321	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:46.071564913 CEST	53	64069	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:47.510375023 CEST	53	52547	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:47.901132107 CEST	52940	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:18:47.901233912 CEST	55455	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:18:47.916244030 CEST	53	55455	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:47.928447008 CEST	53	52940	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:49.215841055 CEST	53	59037	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:50.216109991 CEST	53	61038	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:50.368877888 CEST	56227	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:18:50.369210958 CEST	49529	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:18:50.376954079 CEST	53	56227	1.1.1.1	192.168.2.5
Oct 24, 2024 16:18:50.377319098 CEST	53	49529	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:04.439023972 CEST	53	50829	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:23.236198902 CEST	53	53536	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:45.581677914 CEST	53	55912	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:46.220046043 CEST	53	52807	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:50.432395935 CEST	52328	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:19:50.432395935 CEST	62779	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:19:50.439754009 CEST	53	62779	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:50.440435886 CEST	53	52328	1.1.1.1	192.168.2.5
Oct 24, 2024 16:19:51.265750885 CEST	53	64728	1.1.1.1	192.168.2.5
Oct 24, 2024 16:21:20.224651098 CEST	138	138	192.168.2.5	192.168.2.255
Oct 24, 2024 16:23:56.724459887 CEST	53	56542	1.1.1.1	192.168.2.5
Oct 24, 2024 16:24:24.757971048 CEST	56286	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:24:24.758585930 CEST	54719	53	192.168.2.5	1.1.1.1
Oct 24, 2024 16:24:24.772579908 CEST	53	54719	1.1.1.1	192.168.2.5
Oct 24, 2024 16:24:24.785482883 CEST	53	56286	1.1.1.1	192.168.2.5
Oct 24, 2024 16:24:59.724256992 CEST	53	50810	1.1.1.1	192.168.2.5
Oct 24, 2024 16:26:01.310844898 CEST	53	53395	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 16:18:47.901132107 CEST	192.168.2.5	1.1.1.1	0x4376	Standard query (0)	www.excelworks.co.uk	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:18:47.901233912 CEST	192.168.2.5	1.1.1.1	0x8872	Standard query (0)	www.excelworks.co.uk	65	IN (0x0001)	false
Oct 24, 2024 16:18:50.368877888 CEST	192.168.2.5	1.1.1.1	0x6c5e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:18:50.369210958 CEST	192.168.2.5	1.1.1.1	0xff12	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 16:19:50.432395935 CEST	192.168.2.5	1.1.1.1	0xc8cb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:19:50.432395935 CEST	192.168.2.5	1.1.1.1	0xb9e3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 16:24:24.757971048 CEST	192.168.2.5	1.1.1.1	0x37	Standard query (0)	www.excelworks.co.uk	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:24:24.758585930 CEST	192.168.2.5	1.1.1.1	0x3fdb	Standard query (0)	www.excelworks.co.uk	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 16:17:53.208093882 CEST	1.1.1.1	192.168.2.5	0x98de	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:17:53.208093882 CEST	1.1.1.1	192.168.2.5	0x98de	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:17:53.208093882 CEST	1.1.1.1	192.168.2.5	0x98de	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:18:47.928447008 CEST	1.1.1.1	192.168.2.5	0x4376	No error (0)	www.excelworks.co.uk		217.160.0.56	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:18:50.376954079 CEST	1.1.1.1	192.168.2.5	0x6c5e	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:18:50.377319098 CEST	1.1.1.1	192.168.2.5	0xff12	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 16:18:51.829368114 CEST	1.1.1.1	192.168.2.5	0x6ac9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:18:51.829368114 CEST	1.1.1.1	192.168.2.5	0x6ac9	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:18:51.829368114 CEST	1.1.1.1	192.168.2.5	0x6ac9	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:19:19.533714056 CEST	1.1.1.1	192.168.2.5	0x2fa2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:19:19.533714056 CEST	1.1.1.1	192.168.2.5	0x2fa2	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:19:38.314598083 CEST	1.1.1.1	192.168.2.5	0xdfb8	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:19:38.314598083 CEST	1.1.1.1	192.168.2.5	0xdfb8	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:19:50.439754009 CEST	1.1.1.1	192.168.2.5	0xb9e3	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 16:19:50.440435886 CEST	1.1.1.1	192.168.2.5	0xc8cb	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:24:24.785482883 CEST	1.1.1.1	192.168.2.5	0x37	No error (0)	www.excelworks.co.uk		217.160.0.56	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

slscr.update.microsoft.com

www.excelworks.co.uk

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	50002	217.160.0.56	80	5456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 16:18:47.936059952 CEST	435	OUT	GET / HTTP/1.1 Host: www.excelworks.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 16:18:48.797976971 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 5822 Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: private Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 24 Oct 2024 14:18:48 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 7e e3 e4 f1 ef fa f4 cb 93 37 bf cf cb d3 74 de 2e ca f4 e5 57 4f 9e 9f 9d a4 1f 6d df bd fb dd 7b 27 77 ef 3e 7d f3 34 fd bd bf fd e6 8b e7 e9 ee 78 27 7d 53 67 cb a6 68 8b 6a 99 95 1f a5 1f cd db 76 f5 e8 ee dd ab ab ab f1 d5 bd 71 55 5f dc 7d f3 ea ee 3b c0 d9 c5 8b fa eb 76 eb bd 35 9e b5 b3 8f 8e a8 5b 7c 95 be 5b 94 cb e6 b3 08 9c dd 87 0f 1f ca eb 1f a5 d4 fa c7 1e cf f3 6c 96 16 b3 cf 3e fa 36 fd b2 fb d1 d1 e3 b6 68 cb 1c 5f 9d be 9b e6 65 fa dd aa 7e db a4 cf db 59 ba 9d ca 27 cd aa a6 a6 cd 3c cf db 74 96 37 c5 c5 32 fd 85 e9 4f 3e 39 4e 57 75 75 51 67 8b 45 b1 bc 18 a5 a7 cb 8b 32 5b ce d2 af 7e 2f c2 e9 ae 00 7d 5c 16 cb b7 e9 bc ce cf 3f fb a8 69 af cb bc 19 4f 9b [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"~7t.WOm{'w>}4x'}SghjvqU_};v5[\|[l>6h_e~Y'<t72O>9NWuuQgE2[~/}\?iOK~]{>?2O?:J)(N"?)ft^dN_i'g3zN~.eic3Kk+M^yG)&u[lo(vr\O}Z2)k':VOw>EyE_&.}G"k~]xyYoYjmv.KgO~752+W_}/^}vxO\|x'4S>m=y9~<\|q/~_dgrY'?;?rO\|{&{?~l\|qdL6{Oo?n~<<+/\>O6sj~Q\|y9`x;;yz7+3j3<?'N\|'^?y}
Oct 24, 2024 16:18:48.798026085 CEST	212	IN	Data Raw: f6 ed 27 d7 d4 fe fa f7 f9 ee 6e fb 53 bf 37 f5 fb f6 59 31 b9 f7 93 3b 67 cf be 73 f9 53 7b 3f 79 4d 78 cf 5f fe f4 d5 25 f5 39 9f fc f4 be e2 dc 1e 7c 67 71 bf 98 de 3b 7e 10 a1 c7 0f ce 7e 7a ff e0 f7 79 fd a4 9a 2e 7e 72 f1 f2 f5 d9 fa f9 de Data Ascii: 'nS7Y1;gsS{?yMx_%9\|gq;~~zy.~rv'{>wf7_,~[>_}dO\?SyS+{tro\|pS'{'nM'g'l
Oct 24, 2024 16:18:48.798070908 CEST	1236	IN	Data Raw: d4 c9 4f bc 7e f2 f6 a7 7e ef 9f a2 39 7e 78 f5 53 bf f7 77 7e 10 d2 90 fe fe e9 fb cf 26 8b 19 c1 29 d7 3f 75 ad f3 41 34 fc 7d de ec 1f 3c bf c7 f4 fa c4 d0 ef fc 44 f1 fe c1 3b 1e c7 d9 49 87 97 be 2a 77 7e ea bb 3b 21 de 8b 17 97 93 e5 ab f9 Data Ascii: O~~9~xSw~&)?uA4}<D;I*w~;!stwG[w? p}.~w_>?yz4w={7DO^]4{_m~bO>_4+W}&]RGqB/Cz4T/
Oct 24, 2024 16:18:48.798186064 CEST	1236	IN	Data Raw: 67 33 9a fc 27 75 91 9f 97 d7 a7 ef 56 25 4d 18 4c ca 4f 16 cd 3a 2b 53 f2 9f 08 61 d0 eb d8 23 29 66 e2 30 5d 60 de 89 2e ed 3c 5f 10 36 14 e0 12 ee 3c 08 8a 38 29 21 92 ce b2 36 23 56 5a d7 53 22 72 b3 9e ce d3 ac e1 0f 27 e4 95 d1 bc e4 ef 8a Data Ascii: g3'uV%MLO:+Sa#)f0]`.<_6<8)!6#VZS"r'ZRisM^!S>ac-OXf:~[^Ha^vCocALKuREKs^Qu:%I>t6j]e~3\MN9Q'F9(=UFc7
Oct 24, 2024 16:18:48.798202991 CEST	424	IN	Data Raw: c0 b0 f6 c8 89 49 21 f2 3c e7 20 4a 57 96 ae 09 37 d6 ab e3 f4 db cc b3 c4 25 14 92 60 88 04 1c 3a 0a 3a 58 c5 95 a6 c6 68 09 66 5e 42 97 26 ad 5d d3 30 09 09 6a 4f be ce 88 00 52 18 3c 21 c9 98 55 44 1b 6a c6 dd a0 2d 2b 1d 28 6e 6a 3a ab 88 41 Data Ascii: I!< JW7%`::Xhf^B&]0jOR<!UDj-+(nj:Ah4"H:E0)=HxNzPp@4h b5Z='F+ aXFXwHM:kGdkwH351k_nC mE#&Z))Suk
Oct 24, 2024 16:18:48.798363924 CEST	1236	IN	Data Raw: 51 ae 97 ca f9 a4 45 79 6e e4 df 2f c9 f8 a1 27 70 14 f5 49 ef 11 09 46 e4 b4 d7 14 ca 05 fd b0 28 90 3b 49 e6 98 d8 e2 6d aa e0 68 7c 04 9d 41 90 fe 26 77 a0 26 41 af 84 ba e0 34 91 98 71 fa 84 79 88 26 c6 6a 20 9a 13 36 4d 34 b0 0b 32 1b 24 0c Data Ascii: QEyn/'pIF(;Imh\|A&w&A4qy&j 6M42$*/M0iZZ'`eZ#stHf4Z^s!U'hGA"+}Zx)$s9$[$:+&/KiIu1%".iY7Mp1%-Q>POhm6,>iL9T!
Oct 24, 2024 16:18:48.798428059 CEST	559	IN	Data Raw: f4 73 78 e5 8d 41 35 64 a6 9f 55 34 7e 5a d3 65 f8 0a f1 5c 3f a3 b6 ba 3a c7 b3 fb 0d ac 74 87 3d bc a0 7f a4 cd 8f fd d8 2f 9c 56 ab eb 43 15 06 e1 8c e7 d4 7e 6f 67 e7 01 59 e2 bd 9d bd fd f4 67 d2 57 d9 ac 24 31 39 26 07 ed 82 27 42 98 a5 99 Data Ascii: sxA5dU4~Ze\?:t=/VC~ogYgW$19&'B9&&A$yAOXM^/#5hE>@BT~iJT!BKZ$BTgVjaX/<@~{_h_UKt}u'\|`~>v
Oct 24, 2024 16:18:48.841737032 CEST	337	OUT	GET /styles.css HTTP/1.1 Host: www.excelworks.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.excelworks.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 16:18:49.092569113 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2065 Connection: keep-alive Keep-Alive: timeout=15 Content-Encoding: gzip Last-Modified: Thu, 09 Feb 2017 14:33:46 GMT Accept-Ranges: bytes ETag: "38ea485e182d21:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Thu, 24 Oct 2024 14:18:48 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 fe c7 bf f7 1f 9c 54 b3 eb f4 17 ff c6 c9 8f 2d b2 fa a2 58 6e b7 d5 ea 51 ba b7 b3 7a 77 e8 3e 9b 54 6d 5b 2d 1e a5 bb e1 c7 65 7e de 3e 4a b3 75 5b 79 1f d6 c5 c5 dc fb 74 52 d5 b3 bc a6 57 57 ef d2 a6 2a 8b 59 5a 5f 4c b6 76 f7 0e 46 fa ff 3b 68 55 16 cb 7c 7b 9e cb ab bb e3 7b f7 f1 61 9b bf 6b b7 b3 b2 b8 58 3e 4a d1 15 3e bb cc eb b6 98 66 a5 f9 9c b0 c5 c7 e7 d5 b2 dd 6e 8a 1f e4 8f d2 87 f7 7f 77 fb c9 79 b6 28 ca eb 47 e9 4f e6 f5 2c 5b 66 a3 f4 b8 2e b2 72 94 7e 3b 2f 2f 73 c0 19 a5 4d b6 6c b6 9b bc 2e ce f1 d6 b4 2a 2b 42 16 28 de df 1d f1 ff 18 bf 49 36 7d 7b 51 57 eb e5 6c db 6b b2 77 ff fe 68 ef fe ce 68 6f ff 3e b7 ba 2a 66 ed 9c 30 d8 01 06 bf e4 37 4e 7e e3 64 [TRUNCATED] Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?"T-XnQzw>Tm[-e~>Ju[ytRWWYZ_LvF;hU\|{{akX>J>fnwy(GO,[f.r~;//sMl.+B(I6}{QWlkwhho>f07N~d<%42\e?">U6%w~1QL~,Sa;c(bS6Qc(B'w<4}y~[.a]D(F0>x1\;}H+Unj\|A@vwxe7}A-jYV&]_c>?N'u$0[}?OWE^B:oi{B_,31H@pl`(EVv]o970:8} }vLJ5*gh^ujo(5XD]E~m(gFl?.[,G.5O6XKYdeo2!b,XHpX?x\FM[_Vrj'D\|Y,q\|&8}aP;7h[)Yesj%},xm6)
Oct 24, 2024 16:18:49.092700005 CEST	1171	IN	Data Raw: f3 5b bc e3 4d 43 3b 1b cf f3 8c ec dd 59 4b 38 4c 65 98 42 e7 f6 ba 24 42 57 93 b2 f8 45 eb 9c da 6f 9a 4d 02 a3 df ca f0 19 8c 7e 12 6d cf 98 ce d4 1e 70 6b e9 54 27 d7 32 16 01 36 ad be fd dd 79 26 1a d0 e8 a6 07 63 56 62 bd 8e 94 26 02 b2 2b Data Ascii: [MC;YK8LeB$BWEoM~mpkT'26y&cVb&+0qiLluOonLkMkID>@NjG8p~@`vBM\ng8Y&mvY>GJ@{c>GzI}O_>q_<Yq9.vHJ~;
Oct 24, 2024 16:18:50.501837015 CEST	592	OUT	GET /favicon.ico HTTP/1.1 Host: www.excelworks.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.excelworks.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __utma=78228160.630882712.1729779529.1729779529.1729779529.1; __utmc=78228160; __utmz=78228160.1729779529.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=78228160.1.10.1729779529
Oct 24, 2024 16:18:50.755412102 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: private Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Thu, 24 Oct 2024 14:18:50 GMT Content-Encoding: gzip Data Raw: 38 31 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 58 6b 4f e3 c8 12 fd 7c f9 15 bd 19 31 9f e2 47 1e bc 9c 90 2b 36 80 06 09 e6 a2 81 d9 dd 2b 21 8d 3a 76 27 b6 b0 dd d9 ee 0e 21 1b ed 7f bf a7 ba ed c4 10 60 b5 2b 5d 46 93 c4 4e 55 75 d5 a9 53 0f 67 f8 d3 f9 7f c6 f7 ff bd bd 60 a9 29 72 76 fb fd e7 eb ab 31 6b 79 41 f0 6b 6f 1c 04 e7 f7 e7 ec b7 2f f7 37 d7 ac e3 87 ec ce a8 2c 36 41 70 f1 b5 c5 5a a9 31 f3 28 08 96 cb a5 bf ec f9 52 cd 82 fb 6f c1 33 59 e9 90 5a f5 d1 d3 56 c7 4f 4c d2 1a b1 bd a1 3d e5 b9 c8 4b 7d fa 86 85 ce c9 c9 89 53 74 c2 82 27 a4 64 32 93 8b d1 d5 d5 1d eb 84 70 e3 5c 18 9e e5 22 61 17 4a 49 c5 3c d6 0f fb b8 ed b1 af d2 b0 4b b9 28 93 61 e0 54 a0 ab cd 2a 17 cc ac e6 e2 b4 65 c4 b3 09 62 ad ad f1 9f 3c 8f ed 4d 64 b2 5a 17 5c cd b2 32 0a 07 53 59 1a 4f 67 7f 88 c8 3f 12 85 bb 9c f2 22 cb 57 d1 2f 42 25 bc e4 ed 33 95 f1 bc fd 45 e4 4f c2 64 31 6f 6b 5e 6a 4f 0b 95 4d 07 7f b2 bd 58 26 62 6b 2e 96 b9 54 d1 a7 30 3c 3c 0c 9b c6 3b 7e a7 b6 be 14 d9 2c 35 d1 44 e6 09 e9 fb b1 [TRUNCATED] Data Ascii: 811XkO\|1G+6+!:v'!`+]FNUuSg`)rv1kyAko/7,6ApZ1(Ro3YZVOL=K}St'd2p\"aJI<K(aTeb<MdZ\2SYOg?"W/B%3EOd1ok^jOMX&bk.T0<<;~,5D,f5:h?[R[>&JGIie^{,x;?iPzFJf<<Irrv;\@_y,byi,Y.?s/3Q&~)=<e.@@:3 Agd]ZtCvW'p=u3<Qm=e:3"KG'T/TdJY2vc6up53.a$kP{!L+n~CBEIRT2ZfI<%l:FwQbSa]]cVA0LQ3]Nf]#b"akl}_j>mB%d9p:7]u9$j/SS;LsMD7+=eBlZfv{F,efI"J6?_F2uQ^@tj1Tn`0AdE<Kqg\|y~^Oep\|\|U\)Us:k[Rl<0lSC>7=5Zq
Oct 24, 2024 16:18:50.755757093 CEST	1119	IN	Data Raw: 9b ba 36 49 db a4 6b 20 4b 43 25 47 3b a3 23 11 c2 86 2d 3d c4 19 36 fd b1 c9 b5 8e bf 0c c7 c1 b3 35 9c d6 b4 c0 a1 3b e1 54 c9 d8 b2 a3 69 b0 1e 4a 86 8a 97 c1 bd dd 94 88 09 fd ab e2 ea 82 78 3b ec 22 3d 57 0a 5d 38 50 83 c3 8c f2 79 6e 18 85 Data Ascii: 6Ik KC%G;#-=65;TiJx;"=W]8PynM`m5DXJHxv\t1et}x5Y9J4tEmnzM@{m,];>~tzO'%6BkE;Om@G`JTkJ.WR>bN\

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49718	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-24 14:17:52 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:17:53 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:16:52 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 828bf9a4-7ee4-47a4-84c8-ac12e644a8f4 PPServer: PPV: 30 H: SN1PEPF0002F125 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:17:52 GMT Connection: close Content-Length: 1276
2024-10-24 14:17:53 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49721	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:53 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:54 UTC	561	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:54 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141754Z-r1755647c66d87vp2n0g7qt8bn0000000920000000006pxt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:54 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-24 14:17:54 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:54 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-24 14:17:54 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:17:54 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:16:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BAY x-ms-request-id: 3de20508-b066-40b3-8a24-d11d65ce8946 PPServer: PPV: 30 H: PH1PEPF00011CAB V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:17:53 GMT Connection: close Content-Length: 1276
2024-10-24 14:17:54 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:54 UTC	446	OUT	POST /ppsecure/deviceaddcredential.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 7642 Host: login.live.com
2024-10-24 14:17:54 UTC	7642	OUT	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 71 75 65 73 74 3e 3c 43 6c 69 65 6e 74 49 6e 66 6f 20 6e 61 6d 65 3d 22 49 44 43 52 4c 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 3c 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 32 34 3c 2f 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 3c 2f 43 6c 69 65 6e 74 49 6e 66 6f 3e 3c 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 73 6b 71 63 78 6e 65 78 71 62 6b 6b 6e 6a 3c 2f 4d 65 6d 62 65 72 6e 61 6d 65 3e 3c 50 61 73 73 77 6f 72 64 3e 65 3b 4e 2e 6c 52 7a 75 63 46 33 4e 41 48 4f 76 45 5e 76 65 3c 2f 50 61 73 73 77 6f 72 64 3e 3c 2f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4f 6c 64 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 76 6e 71 75 73 6b 66 70 70 70 63 69 76 63 3c 2f 4f 6c 64 4d Data Ascii: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"><BinaryVersion>24</BinaryVersion></ClientInfo><Authentication><Membername>02skqcxnexqbkknj</Membername><Password>e;N.lRzucF3NAHOvE^ve</Password></Authentication><OldMembername>02vnquskfpppcivc</OldM
2024-10-24 14:17:56 UTC	542	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/xml Expires: Thu, 24 Oct 2024 14:16:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C542_SN1 x-ms-request-id: 5d86c83c-ccc3-41c4-b2ff-c27378a2088e PPServer: PPV: 30 H: SN1PEPF0002F8F0 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:17:55 GMT Connection: close Content-Length: 17166
2024-10-24 14:17:56 UTC	15842	IN	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 20 53 75 63 63 65 73 73 3d 22 74 72 75 65 22 3e 3c 73 75 63 63 65 73 73 3e 74 72 75 65 3c 2f 73 75 63 63 65 73 73 3e 3c 70 75 69 64 3e 30 30 31 38 34 30 31 30 33 31 39 41 43 44 31 31 3c 2f 70 75 69 64 3e 3c 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 33 3c 2f 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 3c 4c 69 63 65 6e 73 65 20 43 6f 6e 74 65 6e 74 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 2d 38 63 63 35 2d 62 32 66 35 33 63 38 33 30 62 37 36 22 20 49 44 3d 22 35 64 63 32 34 32 33 37 2d 61 35 64 34 2d 34 65 66 30 2d 39 30 61 39 2d 66 35 31 39 36 65 39 31 34 32 64 32 22 20 4c 69 63 65 6e 73 65 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 Data Ascii: <DeviceAddResponse Success="true"><success>true</success><puid>00184010319ACD11</puid><DeviceTpmKeyState>3</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="5dc24237-a5d4-4ef0-90a9-f5196e9142d2" LicenseID="3252b20c-d425-4711
2024-10-24 14:17:56 UTC	1324	IN	Data Raw: 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 39 2f 78 6d 6c 64 73 69 67 23 65 6e 76 65 6c 6f 70 65 64 2d 73 69 67 6e 61 74 75 72 65 22 2f 3e 3c 2f 54 72 61 6e 73 66 6f 72 6d 73 3e 3c 44 69 67 65 73 74 4d 65 74 68 6f 64 20 41 6c 67 6f 72 69 74 68 6d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 30 34 2f 78 6d 6c 65 6e 63 23 73 68 61 32 35 36 22 2f 3e 3c 44 69 67 65 73 74 56 61 6c 75 65 3e 67 74 71 77 70 52 35 66 47 44 61 6f 48 73 4d 37 49 57 47 4b 5a 67 61 77 58 61 30 42 50 69 47 61 65 35 62 49 75 6e 2f 52 51 4a 41 3d 3c 2f 44 69 67 65 73 74 56 61 6c 75 65 3e 3c 2f 52 65 66 65 72 65 6e 63 65 3e 3c 2f 53 69 67 6e 65 64 49 6e 66 6f 3e 3c 53 69 67 6e 61 74 75 72 65 56 61 6c 75 65 3e 41 46 38 6f 46 52 2b 47 66 Data Ascii: tp://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>gtqwpR5fGDaoHsM7IWGKZgawXa0BPiGae5bIun/RQJA=</DigestValue></Reference></SignedInfo><SignatureValue>AF8oFR+Gf

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49724	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:55 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:55 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141755Z-17fbfdc98bb9tt772yde9rhbm800000007900000000070n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:55 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49726	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:55 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141755Z-r1755647c66xn9fj09y3bhxnh40000000aqg0000000027nu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49722	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:55 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:55 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141755Z-r1755647c66m4jttnz6nb8kzng00000008d0000000002r3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:55 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49725	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:55 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:55 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141755Z-r1755647c66gb86l6k27ha2m1c000000087g000000008562 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:55 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49723	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:55 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:55 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141755Z-r1755647c66nfj7t97c2qyh6zg00000006mg000000007z9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:55 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:56 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:56 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141756Z-r1755647c66nxct5p0gnwngmx00000000970000000000ebm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49728	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:56 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141756Z-r1755647c66f4bf880huw27dwc00000000h0000000001gf6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49729	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:56 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6e64d82-401e-0029-2a5d-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141756Z-17fbfdc98bb75b2fuh11781a0n00000007c000000000300m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49732	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:56 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:56 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141756Z-r1755647c66dj7986akr8tvaw4000000094g000000003t0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49730	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:56 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141756Z-r1755647c66cdf7jx43n17haqc0000000ah0000000007wby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49733	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=PCUaERDz9kFwZZF&MD=ETnYge3c HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 14:17:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e58846d5-097c-4e7e-a3ae-a2a4a7261758 MS-RequestId: 0224ae56-e863-4f1e-8c2b-c17a01964346 MS-CV: LMvao58dUk6ux3Lc.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 14:17:56 GMT Connection: close Content-Length: 24490
2024-10-24 14:17:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 14:17:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49735	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:57 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141757Z-17fbfdc98bbpc9nz0r22pywp0800000007kg000000002y7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49734	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:57 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8659e35a-201e-005d-7d92-1fafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141757Z-r1755647c66xn9fj09y3bhxnh40000000aq0000000002uvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49736	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:57 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141757Z-r1755647c66zs9x4962sbyaz1w00000007xg000000008kzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49737	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:57 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 68d87b8f-401e-0064-59c9-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141757Z-r1755647c66ldfgxa3qp9d53us00000009s00000000090xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49738	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:57 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 48cb304a-401e-0064-7764-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141757Z-17fbfdc98bblptj7fr9s141cpc00000007ag0000000077ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49741	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:58 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141758Z-r1755647c66f2zlraraf0y5hrs00000008a000000000687q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:58 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49745	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:58 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141758Z-17fbfdc98bb7qlzm4x52d2225c0000000790000000006hku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49744	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:58 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:58 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141758Z-17fbfdc98bbpc9nz0r22pywp0800000007ng000000000176 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:58 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49742	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:58 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141758Z-17fbfdc98bbg2mc9qrpn009kgs00000007fg000000005e4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49743	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:58 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141758Z-17fbfdc98bb4k5z6ayu7yh2rsn00000007f000000000444m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49740	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:58 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-24 14:17:58 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:17:59 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:16:58 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_SN1 x-ms-request-id: dd7abaf6-01a9-41bd-801a-17002227aa36 PPServer: PPV: 30 H: SN1PEPF0002F0E5 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:17:58 GMT Connection: close Content-Length: 11392
2024-10-24 14:17:59 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49749	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:59 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141759Z-r1755647c66x7vzx9armv8e3cw00000000s000000000657f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:59 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49748	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:59 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141759Z-17fbfdc98bbgzrcvp7acfz2d3000000007cg000000005zv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49750	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:59 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141759Z-17fbfdc98bb6j78ntkx6e2fx4c00000007900000000074r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49747	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:59 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a019224c-501e-0047-645d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141759Z-17fbfdc98bb9tt772yde9rhbm800000007fg000000001apk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:59 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:17:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:17:59 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141759Z-17fbfdc98bbcrtjhdvnfuyp28800000007d0000000007yh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:17:59 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49753	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:17:59 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-17fbfdc98bbpc9nz0r22pywp0800000007e00000000066w3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:00 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-17fbfdc98bbg2mc9qrpn009kgs00000007n0000000000n4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ba25aa5e-401e-0015-7950-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-17fbfdc98bblvnlh5w88rcarag00000007eg000000006q5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-r1755647c66xrxq4nv7upygh4s00000003800000000083r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49752	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-24 14:18:00 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:00 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:00 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30389.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_SN1 x-ms-request-id: ed3da16f-7b21-4560-8004-9093a66cc9ac PPServer: PPV: 30 H: SN1PEPF0002F0EB V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:00 GMT Connection: close Content-Length: 11392
2024-10-24 14:18:00 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-17fbfdc98bbkw9phumvsc7yy8w00000007g0000000000ktx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-r1755647c66tmf6g4720xfpwpn0000000am0000000006c08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-r1755647c66wjht63r8k9qqnrs00000008ag000000005tct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141800Z-17fbfdc98bbvf2fnx6t6w0g25n00000007fg000000003p6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:00 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141801Z-r1755647c66zs9x4962sbyaz1w0000000800000000006fvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:01 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:01 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141801Z-r1755647c66sn7s9kfw6gzvyp000000009xg000000003h9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:01 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:01 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141801Z-17fbfdc98bbwfg2nvhsr4h37pn00000007bg0000000074ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49762	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:01 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 14:18:01 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:02 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:02 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 55ef4559-76ee-4d51-a4fa-969fea9d8ca9 PPServer: PPV: 30 H: SN1PEPF0002F91F V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:01 GMT Connection: close Content-Length: 1918
2024-10-24 14:18:02 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:01 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141801Z-r1755647c66z4pt7cv1pnqayy400000009xg000000003m4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:01 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141801Z-17fbfdc98bb94gkbvedtsa5ef400000007eg000000004ghc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:02 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141802Z-17fbfdc98bb9tt772yde9rhbm800000007dg000000003m7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:02 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141802Z-r1755647c66gb86l6k27ha2m1c00000008f00000000000mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:02 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:02 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141802Z-r1755647c66h2wzt2z0cr0zc740000000410000000003sx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:02 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:02 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141802Z-r1755647c66x7vzx9armv8e3cw00000000x0000000000xba x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:02 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:03 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:03 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141803Z-r1755647c66xrxq4nv7upygh4s000000037g000000008yed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:03 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49773	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:03 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 14:18:03 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:04 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:03 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_BAY x-ms-request-id: ad9b8dc1-01c0-4818-8b1c-3f6f6317f5fb PPServer: PPV: 30 H: PH1PEPF00018BFD V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:03 GMT Connection: close Content-Length: 11412
2024-10-24 14:18:04 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49772	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:03 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 14:18:03 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:03 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:03 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 0590ee19-0766-40e6-b3b3-8358a51f31d8 PPServer: PPV: 30 H: SN1PEPF0002F9ED V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:03 GMT Connection: close Content-Length: 1918
2024-10-24 14:18:03 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:03 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:03 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141803Z-r1755647c66n5bjpba5s4mu9d000000009w00000000050ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:03 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:03 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:03 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141803Z-r1755647c66h2wzt2z0cr0zc74000000041g000000002hpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:03 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f6bed088-301e-0000-1a9a-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141803Z-17fbfdc98bbrx2rj4asdpg8sbs00000003cg000000003m4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141804Z-17fbfdc98bbg2mc9qrpn009kgs00000007eg0000000060mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141804Z-17fbfdc98bbgzrcvp7acfz2d3000000007dg000000005e15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141804Z-17fbfdc98bb75b2fuh11781a0n00000007c00000000030qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 8ae0ddcf-601e-0002-0c50-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141804Z-17fbfdc98bblptj7fr9s141cpc00000007e0000000003d50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4edb1b06-d01e-00a1-56e1-2035b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141804Z-r1755647c66cdf7jx43n17haqc0000000ap0000000003yu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141804Z-17fbfdc98bbndwgn5b4pg7s8bs000000077g000000006x6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:04 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141805Z-17fbfdc98bbvcvlzx1n0fduhm000000007fg000000005bfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:05 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141805Z-r1755647c66fnxpdavnqahfp1w00000008000000000076ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:05 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141805Z-r1755647c668mbb8rg8s8fbge400000006ng000000008k8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:05 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:05 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141805Z-r1755647c66lljn2k9s29ch9ts00000009t00000000085fn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:05 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49784	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:05 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 14:18:05 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:05 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:05 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_BAY x-ms-request-id: 4430182f-7810-4959-9edc-5e6c6dd82c1d PPServer: PPV: 30 H: PH1PEPF00011EA1 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:05 GMT Connection: close Content-Length: 11412
2024-10-24 14:18:05 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:05 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:05 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141805Z-17fbfdc98bbn5xh71qanksxprn00000007mg000000001e93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:05 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:05 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:05 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f58edff3-b01e-0002-5659-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141805Z-17fbfdc98bbvf2fnx6t6w0g25n00000007cg000000006367 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141806Z-17fbfdc98bbn5xh71qanksxprn00000007m0000000001tmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:06 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:06 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141806Z-r1755647c66ldfgxa3qp9d53us00000009s0000000009132 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:06 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:06 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141806Z-r1755647c66x46wg1q56tyyk68000000095g000000002b8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:06 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:06 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141806Z-17fbfdc98bbqc8zsbguzmabx68000000076g000000007mm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:06 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:06 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: dd00ddb0-a01e-003d-64e4-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141806Z-r1755647c66x2fg5vpbex0bd8400000000q0000000000pa2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:18:06 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141807Z-17fbfdc98bbwfg2nvhsr4h37pn00000007g0000000002z77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49794	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-24 14:18:07 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:07 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:07 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_SN1 x-ms-request-id: f9d92c97-dd61-429c-a8b4-a58768e7fd7a PPServer: PPV: 30 H: SN1PEPF0002F057 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:07 GMT Connection: close Content-Length: 11412
2024-10-24 14:18:07 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141807Z-r1755647c66vrwbmeqw88hpesn00000009p00000000038a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141807Z-r1755647c66z4pt7cv1pnqayy400000009w0000000005hb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:07 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141807Z-17fbfdc98bblptj7fr9s141cpc00000007ag0000000078m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:07 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141807Z-17fbfdc98bb7qlzm4x52d2225c00000007c00000000051bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:07 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:07 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141807Z-17fbfdc98bbx4f4q0941cebmvs000000079g000000005bn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:08 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141808Z-17fbfdc98bbvcvlzx1n0fduhm000000007kg000000002u8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:08 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141808Z-17fbfdc98bbwfg2nvhsr4h37pn00000007k0000000000k2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:08 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141808Z-r1755647c66f2zlraraf0y5hrs00000008c0000000004fee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:08 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:08 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141808Z-r1755647c66prnf6k99z0m3kzc00000009vg000000005f5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:08 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49804	20.190.160.20	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:08 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-10-24 14:18:08 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-24 14:18:09 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 24 Oct 2024 14:17:08 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C516_BAY x-ms-request-id: de6e3423-05e1-4305-a838-89e8c13ae936 PPServer: PPV: 30 H: PH1PEPF0001B801 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 24 Oct 2024 14:18:08 GMT Connection: close Content-Length: 10197
2024-10-24 14:18:09 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:08 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ec87b83f-a01e-0053-3f64-238603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141808Z-17fbfdc98bbg2mc9qrpn009kgs00000007ng0000000001kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:09 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:09 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d90f75f3-d01e-0066-095d-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141809Z-17fbfdc98bbnhb2b0umpa641c80000000790000000006kuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:09 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:09 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:09 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141809Z-r1755647c66ldfgxa3qp9d53us00000009w0000000004yff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:09 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:09 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:09 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141809Z-17fbfdc98bbkw9phumvsc7yy8w00000007b00000000058p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:09 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:09 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:09 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141809Z-17fbfdc98bbvcvlzx1n0fduhm000000007gg0000000054e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:09 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:09 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:09 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141809Z-r1755647c66l72xfkr6ug378ks00000008ug0000000010f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:09 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:09 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:09 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141809Z-17fbfdc98bbvcvlzx1n0fduhm000000007eg000000006507 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:10 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:10 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:10 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141810Z-r1755647c66zs9x4962sbyaz1w00000008400000000022bu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:10 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:10 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:10 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141810Z-17fbfdc98bb7qlzm4x52d2225c00000007ag000000006btz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:10 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:10 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:10 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141810Z-17fbfdc98bb96dqv0e332dtg600000000770000000007cxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:10 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:10 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:10 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141810Z-17fbfdc98bbpc9nz0r22pywp0800000007eg0000000064f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:10 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:10 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:10 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141810Z-r1755647c66n5bjpba5s4mu9d000000009s0000000008kwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:10 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:11 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 62ffcb86-201e-0071-66cc-20ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141811Z-r1755647c66prnf6k99z0m3kzc00000009s0000000008w63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:11 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:11 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:11 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141811Z-17fbfdc98bbwj6cp6df5812g4s00000000sg000000001h9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:18:11 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:11 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141811Z-17fbfdc98bb8xnvm6t4x6ec5m400000007bg000000001h3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:11 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:11 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 11479f8e-d01e-00ad-32c9-20e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141811Z-r1755647c66wjht63r8k9qqnrs000000088g000000007t2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:11 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:11 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:11 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141811Z-17fbfdc98bbq2x5bzrteug30v800000007eg000000002pp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:11 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:11 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:12 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 3bea9ec9-701e-0098-2c9f-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141812Z-r1755647c66m4jttnz6nb8kzng00000008b0000000004zkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:12 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:12 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:12 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141812Z-r1755647c66vrwbmeqw88hpesn00000009h0000000007tb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:12 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:12 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:12 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: facc6f57-201e-006e-7356-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141812Z-17fbfdc98bbn5xh71qanksxprn00000007mg000000001ebz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:12 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:12 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:12 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141812Z-r1755647c66xn9fj09y3bhxnh40000000aqg0000000027xx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:12 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:12 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:12 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141812Z-r1755647c66prnf6k99z0m3kzc00000009xg0000000032kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:12 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:12 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:12 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141812Z-r1755647c66d87vp2n0g7qt8bn0000000940000000004vem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:13 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:13 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:13 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141813Z-r1755647c66x2fg5vpbex0bd8400000000g00000000058ze x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:13 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141813Z-17fbfdc98bbvvplhck7mbap4bw00000000v00000000037vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2ea30268-a01e-006f-2759-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141813Z-17fbfdc98bbq2x5bzrteug30v800000007eg000000002pqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:13 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5d978800-401e-000a-2456-234a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141813Z-17fbfdc98bbq2x5bzrteug30v800000007e0000000002zgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:13 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:13 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0f0ed433-b01e-0053-635d-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141813Z-17fbfdc98bb96dqv0e332dtg6000000007c0000000003bqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:13 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-17fbfdc98bbngfjxtncsq24exs00000000z0000000001ry3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:14 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:13 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-17fbfdc98bbkw9phumvsc7yy8w00000007fg000000001cw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:14 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:14 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-r1755647c66h2wzt2z0cr0zc740000000430000000000pnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:14 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-r1755647c66xrxq4nv7upygh4s00000003d0000000002rpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:14 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-17fbfdc98bbx648l6xmxqcmf2000000007bg000000005nwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:14 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:14 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-r1755647c66j878m0wkraqty3800000008f000000000024z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:14 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:14 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a4c96680-901e-008f-156c-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141814Z-17fbfdc98bbnhb2b0umpa641c800000007e0000000000tn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:15 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141815Z-r1755647c66sn7s9kfw6gzvyp000000009v0000000005pax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:15 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141815Z-17fbfdc98bbqc8zsbguzmabx68000000075g0000000081gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:15 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141815Z-r1755647c66fnxpdavnqahfp1w000000082g000000004kqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:15 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141815Z-17fbfdc98bb4k5z6ayu7yh2rsn00000007c0000000006f22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:15 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141815Z-r1755647c66dj7986akr8tvaw40000000960000000001t2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:16 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141816Z-r1755647c66m4jttnz6nb8kzng000000089g0000000064g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:16 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141816Z-r1755647c66kv68zfmyfrbcqzg00000008bg00000000514n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:16 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141816Z-17fbfdc98bb75b2fuh11781a0n000000077g000000007ba4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:16 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141816Z-r1755647c669hnl7dkxy835cqc00000007n0000000005fzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:16 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141816Z-17fbfdc98bbvvplhck7mbap4bw00000000rg000000006nme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:16 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141817Z-r1755647c66nfj7t97c2qyh6zg00000006u0000000000mhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:17 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:17 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:17 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141817Z-17fbfdc98bbvvplhck7mbap4bw00000000w0000000002c2p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:17 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:17 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:17 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141817Z-r1755647c66fnxpdavnqahfp1w000000080g000000006g83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:17 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:17 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141817Z-17fbfdc98bbpc9nz0r22pywp0800000007h0000000004tkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:18 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:17 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141817Z-17fbfdc98bbx4f4q0941cebmvs00000007ag000000004hz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:18 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:18 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:18 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 7d169aa3-d01e-0017-7930-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141818Z-r1755647c66x46wg1q56tyyk68000000094g0000000048ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:18 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141818Z-17fbfdc98bblfj7gw4f18guu2800000000m0000000004vh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:18 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:18 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141818Z-r1755647c66f2zlraraf0y5hrs00000008e0000000001cmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:19 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141819Z-17fbfdc98bbx648l6xmxqcmf2000000007fg000000001q06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:19 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:19 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141819Z-r1755647c66nxct5p0gnwngmx0000000093g000000004hny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:19 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:19 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 80b3223a-a01e-0002-4456-235074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141819Z-17fbfdc98bbwj6cp6df5812g4s00000000sg000000001hqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:19 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141819Z-17fbfdc98bb94gkbvedtsa5ef400000007f0000000003wc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:19 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b7d5c986-501e-005b-0250-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141819Z-17fbfdc98bb9tt772yde9rhbm800000007d0000000004gxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:20 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141820Z-r1755647c66m4jttnz6nb8kzng00000008eg000000000v0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:20 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:20 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:20 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141820Z-r1755647c66h2wzt2z0cr0zc740000000400000000004epq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:20 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:20 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:20 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:20 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141820Z-17fbfdc98bbczcjda6v8hpct4c000000010g000000006z11 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:20 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:20 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:20 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141820Z-r1755647c66l72xfkr6ug378ks00000008tg000000002hhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:20 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:20 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 472c62b4-c01e-00a1-2e5d-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141820Z-17fbfdc98bbwfg2nvhsr4h37pn00000007gg000000002b80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:18:21 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:18:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:18:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T141821Z-17fbfdc98bbngfjxtncsq24exs00000000y0000000002qu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:18:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Target ID:	0
Start time:	10:17:41
Start date:	24/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0xeb0000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:17:45
Start date:	24/10/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff7c3b20000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	10:18:43
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	10:18:44
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2016,i,1178374307907939946,2446228775624378766,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	10:18:46
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.excelworks.co.uk/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	10:19:54
Start date:	24/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\user\Desktop\Mortgage Calculator and Comparator.xlsx"
Imagebase:	0xeb0000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of open application windows. Window listings could convey information about how the system is used.For example, information about application windows could be used identify potential data to collect as well as identifying security tooling ( Security Software Discovery ) to evade.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Mortgage Calculator and Comparator.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt (copy)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E49F9D54.jpeg

C:\Users\user\AppData\Local\Temp\91FE7545.tmp

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Desktop\E9350000

C:\Users\user\Desktop\E9350000:Zone.Identifier

C:\Users\user\Desktop\Mortgage Calculator and Comparator.xlsx (copy)

C:\Users\user\Desktop\~$Mortgage Calculator and Comparator.xlsx

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\_platform_specific\win_x64\widevinecdm.dll.sig

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3720_1096783416\manifest.fingerprint

Windows Analysis Report
Mortgage Calculator and Comparator.xlsx